web filter authentication

[Badger_89]

Hi

I haven't used this feature before and need to set it up, have a question if someone can help?

lets say you create a web filter that has some categories set to allow and others set to authenticate.....when the user browses from 1 site in the first authenticate category, then moves to a site in a different authenticate category, do they need to enter their details again or is it just the initial authentication?

thanks

[nradia_FTNT]

Hello

You can set time and if it is in that time frame, it will be allowed for that category:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Creating-a-Web-Filter-profile-with-user/ta...

[Badger_89]

hi

but what happens when the user changes category

so the profile has authenticate under social media and gambling categories

and they browse to facebook then to a gambling site

thanks

[nradia_FTNT · Accepted solution]

It will ask authentication both times because categories are different.

[Badger_89]

thanks :)

[jasicarose75]

---

@Badger_89 wrote:

hi

but what happens when the user changes category

so the profile has authenticate under social media and gambling categories

and they browse to facebook then to a gambling site

thanks

---

If the session is still active, you will not be asked to enter your data again.

[jasicarose75]

---

@Badger_89 wrote:

hi

but what happens when the user changes category

so the profile has authenticate under social media and gambling categories

and they browse to facebook then to a gambling site

If the user tries to access another authenticated category (for example, gambling), the system may ask for authentication again. This is a normal practice, especially in this area. I get bonuses on https://gamblizard.ca/ and constantly go through this check. The most reliable is double authentication, but it is not available everywhere yet. I was recently hacked in one application and I did not have double authentication, although it was possible to set it. Now I always update passwords and set full protection. So take it easy, it is your protection.

thanks

---

Also, typically if a user has authenticated for one protected category, it will be sufficient to navigate to other protected categories until the session expires.