FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
praju
Staff
Staff
Article Id 190290
Description
Websites often use associated sub-domains. This article shows how a web filter / URL filter wildcard expression can be used to block all related sub domains.

This article provides an example using the site wapka-file.com.

Solution
FortiOS v5.0

Using the GUI, go to Security profiles> Web filter> Profiles. Select the appropriate web filter profile. Click on the box “Enable Web Site Filter”.

Select 'Create new'.  Type URL as *wapka-file*. Select type as 'Wildcard', Action as 'Block', and Status as 'Enable'.  After that click apply.  Make sure that the same web filter is applied in the policy.
praju_FD37408_tn_FD37408-1.jpg

FortiOS v5.2

Using the GUI, go to Security profiles> Web filter.  Select the appropriate web filter profile from the top right corner drop down menu. Click on the box “Enable URL Filter” under Static URL Filter.

Select 'Create new'. A pop-up opens up.  Type URL as *wapka-file*. Select type as 'Wildcard', Action as 'Block', and Status as 'Enable'. Select 'OK', then click Apply at the bottom of the profile.  Make sure that the same web filter is applied in the policy.
praju_FD37408_tn_FD37408-2.jpg

The *wapka-file* will block all the domain names which contain the name wapka-file irrespective of the content before and after the name.

Contributors