Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

Web Filter URL Not Working


on FortiGate 60D, I want allow web filter from URL filter.

but I try for setting and is not working? is still blocking!


may know do have sample or how to solve it?



1 Solution
New Contributor II

Did you resolve this?  I know it's a pretty stale thread, but maybe this will help you or the next person.


Static URL filter is slightly counter-intuitive and may not behave quite the way you expect.  Please review documentation (for 5.4, see  Pay close attention to the notes for Allow action.  Allow passes the request on to other proxy functions, such as AV and Web Filter, so if the URL is in a blocked category, it will still be blocked.  The Exempt action bypasses other proxy functions, and while this does prevent web filter from being applied, it also prevents AV scanning.  A better solution may be to use web rating override to re-categorize a URL pattern from it's default Fortiguard category to another Fortiguard category or a custom category, then set that category action to the desired action.

View solution in original post

New Contributor III

NEVER use the "allow" action. Our organization ALWAYS exempts URLs in the CLi with the following action:  "set exempt dlp fortiguard".




edit 0

set url ""

set exempt dlp fortiguard



@kelvinshee - This also applies to the FortiGuard WCF categories. One should never set the action of an permitted/allowed Web Content Filter category to "Allow".  Any allowed categories should be set to "Monitor".  Otherwise, traffic to any domain allowed by category is not logged by the Fortigate.  Should a user become infected as a result of a site allowed by category, not logging the domain would make any post-mortem investigations extremely difficult.


I also tried to use exempt instead of allow but still the same and still blocked.


Yes! I think I find the solution after I do research I found the Web Rating Overrides. I do create new and add those websites which are blocked in fortiguard sports category and now and is working now. Thanks for your replies...


this is working in my case!

New Contributor

Step 1:
Just Enable URL Filter enter the website name and allow it

Step 2:
Bottom of URL filter tab you can see Content filter tab just enable it
Enter the website name with https: and wwww and choose wildcard and regular expression.

Then website will be allowed to acces.



Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors