Fortinet FortiGate Series Administration Manual page 496

Configuring a protection profile
496
If you have blocked a pattern using the FortiGuard Web Filtering, but want certain users to
have access to URLs within the pattern, you can use the FortiGate web filtering override
feature. For more information about FortiGuard web filtering, see
on page 559.
You can configure FortiGuard Web Filtering for HTTP and HTTPS traffic. If your FortiGate
unit supports SSL content scanning and inspection and if you have set HTTPS Content
Filtering Mode in the Protocol Recognition part of this protection profile to Deep Scan you
can select all but one of the same web filtering options for HTTPS and HTTP. If your
FortiGate unit does not support SSL content scanning and inspection or if you have set
HTTPS Content Filtering Mode to URL Filtering you can have fewer options for HTTPS.
See the field descriptions below for details.
For more information, see
"Protocol recognition options" on page
To configure FortiGuard Web Filtering options, go to Firewall > Protection Profile. Select
Create New to add a protection profile, or the Edit icon beside an existing protection
profile. Then select the Expand Arrow beside Web Filtering and scroll down to FortiGuard
Web Filtering. Enter the information as described below, and select OK.
Figure 284: Protection Profile FortiGuard Web Filtering options
"SSL content scanning and inspection" on page 481
487.
FortiGate Version 4.0 MR1 Administration Guide
Firewall Protection Profile
"FortiGuard - Web Filter"
and
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback