why my URL filter couldn't block .app , .io of TLD??

[stan1990]

I would like to block some URL on URL filter , because they are youtube video download tool.
I have added 5 URL today , like "freemake.com" , "getyoutube.com" , "zeemo.ai" already blocked successfully.
But "yt5s.io" , "x2download.app" , both of them couldn't block successfully.....

BTW, I have tried to use "content filter" to block theses website , but it was not successful too, I don't know why...

[cjackson_ncl]

Have you tried using web rating overrides to recategorise the websites to either a blocked custom category, or a FortiGuard category you already have blocked?

[stan1990]

I just have tried to add on web rating override , but it is not any effective.

[dingjerry_FTNT]

Hi @stan1990 ,

Are those URLs HTTPS based? If yes, what does their certificate show for CN or SAN? If CN or SAN does not match to the URL, do you use Deep Inspection?

[stan1990]

Yes , I have checked those 2 website that are https based and match CN.

Then , the deep inspection is like this.

BTW , my version is v7.2.9 100E

[dingjerry_FTNT]

Did you access those URLs directly or they are links in one website?

How does your firewall policy look like?

Did you get any log for this traffic flow with correct policy ID?