Blocking URLs with IPS signatures

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 191719

Article

Description Blocking a specific URL with an IPS signature.

Components

All FortiGate units running FortiOS 3.0.

Steps or Commands

If you want to block your users from accessing specific URL, you can use the following IPS custom signature.

F-SBID(--protocol tcp; --service HTTP; --flow from_client; --pattern"URL_TO_BE_BLOCKED"; --no_case; --context host; )

Where the URL_TO_BE_BLOCKED is the specific URL.

Note that IPS does NOT send response pages back for blocked connections.

3220

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.