Web Filter Profile for Off-fabric devices

[bfig90]

Dear,

Is there an option to configure Web Filter Profile and Video Filter so it cannot be always on for BYOD or off fabric devices ? I want to be enabled only while the user is connected to VPN.

[johnathan]

You should be able to enable off-net profiles in whatever policy you have for the users. Once enabled, you can just select a different Web Filter and Video Filter profile for users whom are off-net. 
See: https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/519742/adding-an-endpo...

[bfig90]

Yes. I have already distinguished the policies but i cannot find the option to tell that: Do the web filter only when you are in VPN connection 

[johnathan]

Ah, here is how to actually have the EMS server detect if the user is off or on fabric: https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/303940/on-fabric-detec...