Per-User Web Filtering
Overview
FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
04-40001-99556-20090626
43
http://docs.fortinet.com/
•
Feedback
Per-User Web Filtering
This chapter describes how to deploy the FortiClient application to perform web filtering
customized for each user on a Microsoft Windows network. For larger deployments, a
FortiManager system simplifies management of user web filter profiles.
This chapter contains the following sections:
•
Overview
•
Configuring web filtering
Overview
FortiClient Endpoint Security web filtering controls access to web sites based on
FortiGuard Service web site rating categories and black/white URL lists. The web filter
profile selects which FortiGuard categories the user is permitted to access. Additionally,
URLs in the black list are always blocked and URLs in the white list are always permitted.
You select a web filter profile for each user or user group. Users with no assigned profile
are assigned to a global profile. You can create as many profiles as you need, one per
user if necessary.
You can define web filter profiles and users locally in the FortiClient application. This is
most suitable for a computer with a limited number of users, or if you decide to assign
occasional users to a default web filter profile. For information about configuring
FortiClient web filtering, see the Web Filter chapter of the
FortiClient Endpoint Security
User Guide
.
If you have many FortiClient installations, you can manage their configurations with a
FortiManager unit. This eliminates the need to configure all of the profiles and users on
every FortiClient application you install.
Web filtering on Windows networks
On a Microsoft Windows network, any user can log on at any computer. If you want to
perform web filtering configurable to the group or user level, you can use a FortiManager
unit to provide web filter profile information to each FortiClient application as needed.
Web filtering for remote users
You can install FortiClient on a Windows Terminal Server or a Citrix Presentation Server to
provide web filtering for remote users on a Windows network. The user’s computer does
not need to have the FortiClient application installed. See
“Installing FortiClient on Citrix
servers” on page 20
.
Configuring web filtering
To manage FortiClient web-filtering with a FortiManager unit, you need to:
• add each FortiClient computer as a managed client
• define the web filter profiles you will assign to users
• configure LDAP settings to obtain Windows group/user information
