block vip admin page

[rezafathi]

hi

I have a server configured as a vip in my fortigate to be accesses from internet. I want to block it's admin page. (my.domain.com/admin) . I tried the policy with deep packet and ssl inspection along with creating a webfilter and blocked *\admin* but still admin page reachable from internet. how can i block admin page?

[dingjerry_FTNT]

Hi @rezafathi ,

Which one did you use, Simple, WildCard or Regex?

Anyway, why did you put a backslash in the entry?   

*\admin*

[rezafathi]

hi

I tried with simple and wildcard and also removed / but still admin page is accessible from internet.

[dingjerry_FTNT]

Hi @rezafathi ,

Please provide:

1) The firewall policy with VIP applied;

2) The VIP configuration;

3) The SSL Inspection profile configuration;

4) The URL Filter list configuration.

[rezafathi]

here is the screenshots you requested :

[dingjerry_FTNT]

Hi @rezafathi ,

Just like what I expected, you used Certificate Inspection for the SSL Inspection profile.  

In this way, FGT will detect the hostname only, not the full URL.

You must use Deep Inspection to detect the full path with the "admin" word.

[rezafathi]

i used deep packet inspection but when i want to open the page from internet it shows certificate error and also admin page still opens.

[rezafathi]

any help?

[rezafathi]

any help?

[dingjerry_FTNT]

Please share your SSL/SSH Inspection profile used for this VIP traffic.