Fortinet FortiGate 3000, Administration Manual

Page: 334 / 398

334
01-28006-0010-20041105 Fortinet Inc.
URL block Web filter
To add a URL to the web URL block list
1 Go to Web Filter > URL Block .
2 Select Web URL Block.
3 Select Create New.
Figure 162:Adding a new URL
4 Enter a URL or partial URL to add to the URL block list. (Do not include http://.)
Type a top-level URL or IP address to block access to all pages on a web site. For
example,
www.badsite.com
or
122.133.144.155
blocks access to all pages at
this web site.
Enter a top-level URL followed by the path and filename to block access to a single
page on a web site. For example,
www.badsite.com/news.html
or
122.133.144.155/news.html
blocks the news page on this web site.
To block all pages with a URL that ends with
badsite.com
, add
badsite.com
to
the block list. For example, adding
badsite.com
blocks access to
www.badsite.com
,
mail.badsite.com
,
www.finance.badsite.com
, and so
on.
5 Select Enable.
6 Select OK.
Web pattern block list
In addition to blocking specific or partial URLs, you can block all URLs that match
patterns you create using text and regular expressions (or wildcard characters). For
example,
badsite.*
matches
badsite.com
,
badsite.org
,
badsite.net
and
so on.
FortiGate web pattern blocking supports standard regular expressions. You can add
up to 20 patterns to the web pattern block list.
Note: You can type a top-level domain suffix (for example, “com” without the leading period) to
block access to all URLs with this suffix.
Note: Enable Web filtering > Web URL Block in your firewall Protection Profile to activate the
web pattern block settings.