Content Block - Fortinet FortiGate FortiGate-1000 Administration Manual

Content block

324
Table 33: Web filter and Protection Profile web category filtering configuration
Protection Profile web category filtering
Enable category block (HTTP only)
Enable FortiGuard web filtering.
Block unrated websites (HTTP only)
Block any web pages that have not been rated
by the FortiGuard.
Allow websites when a rating error occurs
(HTTP only)
Allow web pages that return a rating error
from FortiGuard.
Category / Action
FortiGuard web filtering service provides
many categories by which to filter web traffic.
You can set the action to take on web pages
for each category. Choose from allow,
monitor, or reject.
Protection profile configuration
For information about configuring Protection Profiles, see
page 223. For information about adding protection profiles to firewall policies, see
add a protection profile to a policy" on page
Order of web filter operations
Web filtering includes various modules and engines that perform separate tasks. The
FortiGate unit performs web filtering in the order the filters appear in the web-based
manager menu: content block, URL block, URL exempt, category block (FortiGuard),
and script filter.
This chapter describes:
• Content block
• URL block
• URL exempt
• Category block
• Script filter
Control web content by blocking specific words or word patterns. The FortiGate unit
blocks web pages containing banned words and displays a replacement message
instead.
You can use Perl regular expressions or wildcards to add banned word patterns to the
list. See "Using Perl regular expressions" on page
01-28006-0068-20041105
Web Filter setting
Web Filter > Category Block > Configuration
Enable or disable FortiGuard and enable and
set the size limit for the cache.
"Protection profile" on
230.
348.
Web filter
"To
Fortinet Inc.