Per-User Web Filtering; Overview; Web Filtering On Windows Networks; Web Filtering For Remote Users - Fortinet Version 4.0 MR1 Administration Manual

Per-User Web Filtering

Per-User Web Filtering

Overview

Web filtering on Windows networks

Web filtering for remote users

Configuring web filtering

FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
04-40001-99556-20090626
http://docs.fortinet.com/ • Feedback
This chapter describes how to deploy the FortiClient application to perform web filtering
customized for each user on a Microsoft Windows network. For larger deployments, a
FortiManager system simplifies management of user web filter profiles.
This chapter contains the following sections:
• Overview
• Configuring web filtering
FortiClient Endpoint Security web filtering controls access to web sites based on
FortiGuard Service web site rating categories and black/white URL lists. The web filter
profile selects which FortiGuard categories the user is permitted to access. Additionally,
URLs in the black list are always blocked and URLs in the white list are always permitted.
You select a web filter profile for each user or user group. Users with no assigned profile
are assigned to a global profile. You can create as many profiles as you need, one per
user if necessary.
You can define web filter profiles and users locally in the FortiClient application. This is
most suitable for a computer with a limited number of users, or if you decide to assign
occasional users to a default web filter profile. For information about configuring
FortiClient web filtering, see the Web Filter chapter of the
User Guide.
If you have many FortiClient installations, you can manage their configurations with a
FortiManager unit. This eliminates the need to configure all of the profiles and users on
every FortiClient application you install.
On a Microsoft Windows network, any user can log on at any computer. If you want to
perform web filtering configurable to the group or user level, you can use a FortiManager
unit to provide web filter profile information to each FortiClient application as needed.
You can install FortiClient on a Windows Terminal Server or a Citrix Presentation Server to
provide web filtering for remote users on a Windows network. The user's computer does
not need to have the FortiClient application installed. See
servers" on page 20.
To manage FortiClient web-filtering with a FortiManager unit, you need to:
• add each FortiClient computer as a managed client
• define the web filter profiles you will assign to users
• configure LDAP settings to obtain Windows group/user information
FortiClient Endpoint Security
"Installing FortiClient on Citrix
Overview
43