FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ckumar_FTNT
Staff
Staff
Article Id 193777
Description
This article describes how to exempt or block the access to website which has subdomains/embedded links encoded.

Solution
Some sites will be using multiple sub-domains/ embedded links which might fall under unrated Forti-guard category, so it will be required to exempt all sub-domains/ embedded as well in order to access the site.

To obtain the embedded URL’s of the site, follow the below steps.

- Open the browser ex., Google chrome.

1) Select the page and select the Inspect (Or) press Ctrl+Shift+I.





2) On the right side select the double arrow icon (>>) then Select the security.





Note.
Main URL is shown in the origin and resolved sub-domain/embedded URL’s are listed in the 'Secure origins', non-resolved domains/embedded links are listed in the 'Canceled'.

3) If the page is reloading and not showing the information or popping with the error message, check the 'Canceled' URL’s and ADD them in the URL filter list to allow the site properly.

To Configuring/ADD a URL into the filter list:

From GUI.

- Go to Security Profiles -> Web Filter.
- Select a web filter to edit
- Under Static URL Filter, enable URL Filter, and select Create New
- Enter the URL, without the 'http', for example: *.msftauth.net
- Select a Type: Simple , Regular Expression, or Wildcard. In this example, select Wildcard
- Select the Action to take against matching URLs: Exempt
- Select 'Enable'.
- Select 'OK'.


Related Articles

Technical Note : How to Block/Allow Subdomain on URL filter

Contributors