Forticlient Webfilter

[AUT_Maverick]

Dear Forum!

I have a Forticlient and Forticlient EMS on which we use a web filter. The webfilter profile is managed by Fortimanager. We have the strange thing that when users are in the office the webfilter blocks all sites. But when they are in the homeoffice or connected to the guest wifi in the office, the webfilter behaves as we configured it.

Why do we have this behaviour? 

[mgoswami]

Hi,

The behavior which you are observing could probably be because of the profile that they are using and that working is only applying when off net. When onnet, it may be hitting the default profile.

We might need to check this with logs since you are also using FMG.

You may follow the below steps for collecting the logs:

EMS logs:

Please set the EMS log level to debug (System Settings -> Log) and the run the EMS diagnostic tool located in C:\Program Files (x86)\Fortinet\FortiClientEMS\EMSDiagnostool.exe.

Once the tool completes, please share the output file with us.

Output - %temp% folder

It has "*.cab" extension on it - it should be something like this: "EMS-version-numbers.cab"

Note: It will take some time, so please be patient.

FCT logs:

Can you please set the client log level to debug in EMS profile, reproduce the issue and provide Diagnostic Tool output .cab file from the affected client?

The diagnostic tool can be executed from the FortiClient About page. 

BR,
Manosh

[AUT_Maverick]

Dear Manosh!

Here you will find the logs you are requested: Logs 

BR

Valentin Huber

[AUT_Maverick]

Dear Manosh!

Is there an update?

BR

[mgoswami]

Hi Huva,

I was not able to access the logs which you have attached. 

You may also like to refer to this link and understand the behaviour:

https://community.fortinet.com/t5/FortiClient/Technical-Note-FortiClient-and-Web-Filter-behavior-whe...

BR,

Manosh