Web Filter blocks IP

[itnnetworks]

Hello, 

We have a fortigate 80F. There is a Firewall Policy, which has WebFilter enabled for traffic from LAN to Internet.

The problem is that we are trying to access a sftp with IP. I see in the logs that the IP is categorized as Unrated. 

I created a new Web Rating override and in the URL I've added the IP we are trying to access (The override is to use a different category to allow the access). Obviously the URL field is for URLs, so the IP is still been treated as unrated. To overcome this issue I have created a new Policy rule so the traffic for this specific IP is not using the WebFilter UTM.

Is there any way (except making the Unrated category allowed) to overcome this issue?

[seshuganesh · Accepted solution]

Hi Team,

Could you please try to exempt this ip address under web filter profile >> url filter, you can see the below screenshot for the reference:

You have to keep action as exempt and enable it.

Please keep us posted

[sw2090]

yeah what seshuganesh says :)

Webfilter is made for FQDN not for ips. I also recommend using the url filter for that with an exempt rule like he described it.

[vponmuniraj]

Hi, 

Web filter works on HTTP / HTTPS ports. 

Can you paste the log as well as the firewall policy you are referring to? 

Regards,

Vignesh.

[sw2090]

that too, vponmuniraj :)

Also it does not support wildcards while the url filter does.

And as said webflter is made for fqdns not ips.

Alas that is what TAC told me once :)

[itnnetworks]

Hi all, 

@seshuganesh solution is working. We can see now in logs that the traffic is marked as passthrough. Thank you all!