Fortiguard-Web Filtering Options - Fortinet Fortigate-5000 series Administration Manual

Configuring a protection profile

FortiGuard-Web filtering options

276
Figure 168:Protection profile FortiGuard-Web web filtering options
The following options are available for web category filtering through the
protection profile.
Enable FortiGuard-Web
Filtering
Enable FortiGuard-Web
Filtering Overrides
Provide details for blocked
HTTP 4xx and 5xx errors
(HTTP only)
Rate images by URL (blocked
images will be replaced with
blanks) (HTTP only)
Allow websites when a rating
error occurs
Strict Blocking
Enable FortiGuard-Web™ category blocking.
Enable category overrides. When selected, a list of
groups is displayed. If no groups are available, the option
is grayed out. For more information about overrides, see
"Viewing the override list" on page 374
override rules" on page 375. For more information about
groups, see "User group" on page
Display a replacement message for 400 and 500-series
HTTP errors. If the error is allowed through, malicious or
objectionable sites can use these common error pages to
circumvent web category blocking.
Block images that have been rated by FortiGuard.
Blocked images are replaced on the originating web
pages with blanks.
Image types that are rated are GIF, JPEG, PNG, BMP, and
TIFF.
Allow web pages that return a rating error from the web
filtering service.
When enabled, web site access is disallowed if any
classification or category matches the block rating or lists.
When disabled, web site access is allowed if any
classification or category matches the allowed list. This
option is enabled by default.
FortiGate Version 3.0 MR4 Administration Guide
Firewall Protection Profile
and "Configuring
327.
01-30004-0203-20070102