Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
vvserpent
New Contributor II

Webfilter Loggin Issue

Hi, My 1240B running 4.0 RM3 patch 11 software and I have enabled WebFilter -> URLFilter to block the access to " msn-photolive.net" . It works but my 1240B generate webfilter log message for each outgoing http access. I have check all configuration options and don' t know how to make webfilter log the " bad access" only. Could you tell me how to exclude the normal HTTP access from the webfilter log? # The inspection mode is " flow-based" # FortiGuard Categories is not selected, I use URL filter only.
6 REPLIES 6
Dave_Hall
Honored Contributor

In the webfilter profile, disable " Log all URLs" if it is enabled.

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
vvserpent
New Contributor II

Hi Dave, Thanks for your help. But I using " flow based" inspection mode, the " Log all URLs" checkbox is hidden by the sytsem.
vvserpent
New Contributor II

I found that, I am not able to post the reply message when Web-Filter enabled. When I press " OK" button to post the reply, the Fortinet Webfilter blocked it... I need to add fortinet to the allow list ? ##### The URL you requested has been blocked The page you have requested has been blocked, because the URL is banned. URL = support.fortinet.com/forum/postpro.asp?subject=RE: Webfilter Loggin Issue& ##### Regards, Jacky
ede_pfau
SuperUser
SuperUser

no, just ONE way to keep bug reports to a minimum...
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
ede_pfau
SuperUser
SuperUser

OK, back to work: in UTM Profiles > Web Filter > Profile, - uncheck ' Log all URLs' - uncheck ' FortiGuard Categories' as well if you don' t use them - in ' Advanced Filter' , check ' Web URL Filter' and select the URL filter you' ve defined before That should do it.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
vvserpent
New Contributor II

Hi Ede, Both " Log all URLs" and " FortiGuard Categories" are unchecked. But I selected " Flow-based" inspection mode. From the WebFilter log viewer, I still can see all URL which has been visited. Regards, Jacky
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors