Description
This article explains the changes made around the Web Filter override starting FortiOS 6.2.5 and 6.4.2.
Scope
- For FortiGate 6.2.5 and above.
- For FortiGate 6.4.2 and above.
Solution
In the GUI, an Allow action of a local/remote category when editing a web filter profile is effectively a shortcut to disable the local/remote category overrides.
The URLs subject to rating overrides will now only take effect if the local category action is set to ‘Monitor’.
For example: In case the site www.google.com is overwritten to 'Business' Category, set action 'Monitor' to the 'Business' Category instead of 'Allow'.
From CLI:
# config webfilter profile
edit <web filter profile>
config ftgd-wf
config filters
edit <>
set category <custom category>
set action monitor
next
next
end
next
end
Reference: https://docs.fortinet.com/document/fortigate/6.4.2/fortios-release-notes/230510/changes-in-default-b...- Search for '630433'.
