Fortinet FortiGate FortiGate-300A, Administration Manual

Page: 324 / 392

324
01-28006-0092-20041105 Fortinet Inc.
Content block Web filter
Table 33: Web filter and Protection Profile web category filtering configuration
Protection profile configuration
For information about configuring Protection Profiles, see “Protection profile” on
page 223 . For information about adding protection profiles to firewall policies, see “To
add a protection profile to a policy” on page 230 .
Order of web filter operations
Web filtering includes various modules and engines that perform separate tasks. The
FortiGate unit performs web filtering in the order the filters appear in the web-based
manager menu: content block, URL block, URL exempt, category block (FortiGuard),
and script filter.
This chapter describes:
• Content block
• URL block
• URL exempt
• Category block
• Script filter
Content block
Control web content by blocking specific words or word patterns. The FortiGate unit
blocks web pages containing banned words and displays a replacement message
instead.
You can use Perl regular expressions or wildcards to add banned word patterns to the
list. See
“Using Perl regular expressions” on page 348 .
Protection Profile web category filtering Web Filter setting
Enable category block (HTTP only) Web Filter > Category Block > Configuration
Enable FortiGuard web filtering. Enable or disable FortiGuard and enable and
set the size limit for the cache.
Block unrated websites (HTTP only)
Block any web pages that have not been rated
by the FortiGuard.
Allow websites when a rating error occurs
(HTTP only)
Allow web pages that return a rating error
from FortiGuard.
Category / Action
FortiGuard web filtering service provides
many categories by which to filter web traffic.
You can set the action to take on web pages
for each category. Choose from allow,
monitor, or reject.