What filter gets applied first

[rc179]

Within a web filter security policy, which get's applied first, the Category filter, or the URL filter?

[Dave_Hall]

Static URL filtering followed by FortiGuard categories.  See FD40476 or 11158.

[Toshi_Esumi]

URL filters are get examined first, then Category filters.

https://kb.fortinet.com/kb/documentLink.do?externalID=11158

The KB is really old but I don't think they've ever changed this order. Otherwise, it would break many policies when it's upgraded.

[rc179]

So if I turn off the category filter and put a * monitor in the URL filter, I will effectively log all web access.