Fortinet FortiGate 100A, Administration Manual

Page: 314 / 374

314
01-28007-0068-20041203 Fortinet Inc.
Configuring the web URL block list Web filter
Configuring the web URL block list
To add a URL to the web URL block list
1 Go to Web Filter > URL Block .
2 Select Web URL Block.
3 Select Create New.
Figure 163:Adding a new URL
4 Enter a URL or partial URL to add to the URL block list. (Do not include http://.)
Type a top-level URL or IP address to block access to all pages on a web site. For
example,
www.badsite.com
or
122.133.144.155
blocks access to all pages at
this web site.
Enter a top-level URL followed by the path and filename to block access to a single
page on a web site. For example,
www.badsite.com/news.html
or
122.133.144.155/news.html
blocks the news page on this web site.
To block all pages with a URL that ends with
badsite.com
, add
badsite.com
to
the block list. For example, adding
badsite.com
blocks access to
www.badsite.com
,
mail.badsite.com
,
www.finance.badsite.com
, and so
on.
5 Select Enable.
6 Select OK.
Web pattern block list
In addition to blocking specific or partial URLs, you can block all URLs that match
patterns you create using text and regular expressions (or wildcard characters). For
example,
badsite.*
matches
badsite.com
,
badsite.org
,
badsite.net
and
so on.
FortiGate web pattern blocking supports standard regular expressions. You can add
up to 20 patterns to the web pattern block list.
Note: Do not use regular expressions in the web URL block list. You can use regular
expressions in the web pattern block list to create URL patterns to block. See “Web pattern
block list” on page 314 .
Note: You can type a top-level domain suffix (for example, “com” without the leading period) to
block access to all URLs with this suffix.
Note: Enable Web filtering > Web URL Block in your firewall Protection Profile to activate the
web pattern block settings.