Defining Web Filter Profiles; Configuring Ldap Settings; Assigning Web Filter Profiles - Fortinet Version 4.0 MR1 Administration Manual

Per-User Web Filtering

Defining web filter profiles

Configuring LDAP settings

Assigning web filter profiles

FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
04-40001-99556-20090626
http://docs.fortinet.com/ • Feedback
In the FortiClient Manager, go to Global Configuration > Web Filter Profile. Click Create
New. Enter the following information and click OK.
Name Enter a name for the profile.
Comments Optionally, enter descriptive information about the profile.
Bypass URLs Bypass URLs are allowed even if they are in a blocked category.
Block URLs Block URLs are always blocked.
To add a URL, enter it in the field below the list and select Add.
To remove a URL, select it in the list and then select Delete.
Select category to Either select Select All or select individual categories to block. You can
expand the categories to select specific sub-categories.
block
Select classification Either select Select All or select individual classifications to block.
to block
FortiClient Manager uses LDAP protocol to retrieve information about Windows AD users
and groups from the domain controller.
Go to Settings > LDAP Group/User > LDAP Settings and click Create New. Enter the
following information and select OK.
Name Enter a name for this LDAP server.
Server Name/IP Enter the fully-qualified domain name or IP address of the Windows AD
domain controller.
Server Port Enter the port used to communicate with the LDAP server. The default is
port 389. If needed, change the port to match the server.
BaseDN Enter the Base Distinguished Name for the server. You can get this
information from the server's administrator.
BindDN Enter the Bind Distinguished Name for the server. You can get this
information from the server's administrator.
Password Enter the password required for logon to make queries.
Test Connection Select this button to attempt a connection to the domain controller using the
settings you have entered. The results of the connection test display below
the button.
You can assign web filter profiles to Windows groups and users.
To assign web filter profiles to groups
1 In the FortiClient Manager, go to Settings > LDAP Group/User > LDAP Group/User.
2 From the LDAP Server list, select the Windows AD domain controller.
3 Select Synchronize.
4 Expand domains as needed to show groups.
5 From the Web Filter Profile list, select the profile you want to assign.
6 Select group(s) (each one has a check box) and then select Assign Profile.
For each selected group, the Web Filter Profile column lists the assigned profile.
7 Repeat Step 4 through Step 6 for each web filter profile you want to assign.
Configuring web filtering
45