Technical Note : Blocking HTTPS sites

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 196018

Description

It has become a common practice to redirect a connecting URL to another site. So when the secure sites are configured to be blocked, some of those sites are not blocked due to this.

This can be overcome this by configuring 'URL Filter' with the block scanning set to 'Wildcard'.

Solution

An entry should be created on the URL Filter setting, for example:

When a user attempts to access the blocked site they will get an error page as shown below:

7194

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.