FortiGuard Web Filtering Category and Classification numbers / FortiGate configuration and troubleshooting

[rmetzger]

Description

The FortiGuard URL web filtering service provides filtering capabilities based on web content categories and web content classifications.  More information is available in the Web Filtering section of the FortiGuard Center web site.

FortiOS v5.4

For FortiOS v5.4 a full listing of the FortiGuard Web Filtering categories can be found in the Security Profiles chapter of the FortiOS Handbook.

FortiOS v5.0 and v5.2

This article is no longer applicable, a listing of the categories and classifications can be found on the FortiGuard Center web site.

Prior to FortiOS v5.0

This article describes the URL rating category and classification numbers available in the FortiGate, and how to configure and verify, or troubleshoot rating issues.

Solution
In FortiOS 4.0, the FortiGuard Web Filtering Category and Classification numbers can be retrieved by editing from a FortiGate CLI a protection profile, and typing "get", as shown in the following examples.

• gXY   are representing the rating categories

• cXY  are representing the rating classifications

Please note that these categories may change between major releases of the FortiOS firmware.
 
Since FortiOS 4.0MR2
FGT# config webfilter profile
FGT(profile) # edit test
FGT(test) # get

[...] 

g01 Potentially Liable:
      1 Drug Abuse
        2 Occult
      3 Hacking
      4 Illegal or Unethical
      5 Racism and Hate
      6 Violence
     57 Marijuana
     58 Folklore
     59 Proxy Avoidance
     60 Web Translation
     61 Phishing
     62 Plagiarism
     83 Child Abuse
  g02 Controversial:
      7 Abortion
      8 Adult Materials
      9 Advocacy Organizations
     11 Gambling
     12 Extremist Groups
     13 Nudity and Risque
     14 Pornography
     15 Tasteless
     16 Weapons
     63 Sex Education
     64 Alcohol
     65 Tobacco
     66 Lingerie and Swimsuit
     67 Sports Hunting and War Games
  g03 Potentially Non-productive:
     17 Advertising
     18 Brokerage and Trading
     19 Freeware and Software Downloads
     20 Games
     23 Web-based Email
     68 Web Chat
     69 Instant Messaging
     70 Newsgroups and Message Boards
     71 Digital Postcards
  g04 Potentially Bandwidth Consuming:
     24 File Sharing and Storage
     25 Streaming Media
     72 Peer-to-peer File Sharing
     75 Internet Radio and TV
     76 Internet Telephony
  g05 Potential Security Violating:
     26 Spyware and Malware
  g06 General Interest:
     28 Arts and Entertainment
     29 Culture
     30 Education
     31 Finance and Banking
     32 Homosexuality
     33 Health and Wellness
     34 Job Search
     35 Medicine
     36 News and Media
     37 Social Networking
     38 Political Organizations
     39 Reference
     40 Religion
     41 Search Engines and Portals
     42 Shopping and Auction
     43 General Organizations
     44 Society and Lifestyles
     46 Sports
     47 Travel
     48 Personal Vehicles
     77 Child Education
     78 Real Estate
     79 Restaurant and Dining
     80 Personal Websites and Blogs
  g07 Business Oriented:
     49 Business
     50 Information and Computer Security
     51 Government and Legal Organizations
     52 Information Technology
     53 Armed Forces
     84 Web-based Applications
  g08 Others:
     54 Dynamic Content
     55 Miscellaneous
     56 Web Hosting
     81 Secure Websites
     82 Content Servers
     85 Domain Parking
  g21 Unrated
  c01 Cached Content
  c02 Multimedia Search
  c03 Image Search
  c04 Audio Search
  c05 Video Search
  c06 Spam URL
  c07 Personal Privacy

[...]

FortiOS before 4.0MR2 :
FGT1 # config firewall profile
FGT1 (profile) # edit test
FGT1 (test) # get

[....]

g01 Potentially Liable:
      1 Drug Abuse
      2 Occult
      3 Hacking
      4 Illegal or Unethical
      5 Racism and Hate
      6 Violence
     57 Marijuana
     58 Folklore
     59 Proxy Avoidance
     60 Web Translation
     61 Phishing
     62 Plagiarism
     83 Child Abuse

  g02 Controversial:
      7 Abortion
      8 Adult Materials
      9 Advocacy Organizations
     11 Gambling
     12 Extremist Groups
     13 Nudity and Risque
     14 Pornography
     15 Tasteless
     16 Weapons
     63 Sex Education
     64 Alcohol
     65 Tobacco
     66 Lingerie and Swimsuit
     67 Sports Hunting and War Games

  g03 Potentially Nonproductive:
     17 Advertising
     18 Brokerage and Trading
     19 Freeware Downloads
     20 Games
     23 Web based Email
     68 Web Chat
     69 Instant Messaging
     70 Newsgroups and Message Boards
     71 Digital Postcards

  g04 Potentially Bandwidth Consuming:
     72 Peer-to-peer File Sharing
     73 Personal Storage
     74 Multimedia Download
     75 Internet Radio and TV
     76 Internet Telephony

  g05 Potential Security Violating:
     26 Malware
     27 Spyware

  g06 General Interest:
     28 Arts and Entertainment
     29 Culture
     30 Education
     31 Finance and Banking
     32 Homosexuality
     33 Health and Wellness
     34 Job Search
     35 Medicine
     36 News and Media
     37 Personal Relationships
     38 Political Organizations
     39 Reference
     40 Religion
     41 Search Engines
     42 Shopping and Auction
     43 General Organizations
     44 Society and Lifestyles
     46 Sports
     47 Travel
     48 Personal Vehicles
     77 Child Education
     78 Real Estate
     79 Restaurant and Dining
     80 Personal Websites

  g07 Business Oriented:
     49 Business
     50 Information and Computer Security
     51 Government and Legal Organizations
     52 Information Technology
     53 Armed Forces

  g08 Others:
     54 Dynamic Content
     55 Miscellaneous
     56 Web Hosting
     81 Secure Websites
     82 Content Servers

  g21 Unrated

  c01 Cached Content
  c02 Multimedia Search
  c03 Image Search
  c04 Audio Search
  c05 Video Search
  c06 Spam URL

[....]

 
This simple example shows how to block all URL rated as Potentially Liable  in FortiOS 4.0MR2 :

config webfilter profile
    edit "block_all_Potentially_Liable"
            config http
                set options fortiguard-wf
            end
            config https
                set options fortiguard-wf
            end
            config ftgd-wf
                set allow g02 g03 g04 g05 g06 g07 g08 g21 g22 c01 c02 c03 c04 c0
5 c06 c07
                set deny g01
            end
        set web-ftgd-err-log enable
    next
end

Verifying a URL rating can be done from the FortiGuard Web Filtering page : http://www.fortiguardcenter.com/webfiltering/webfiltering.html

Troubleshooting rating issues can be done using the following diagnose command (you may want to log all output to a file as it may be verbose depending on the traffic volume):
diagnose debug application urlfilter -1
diagnose debug en

And then access the web resource in question.

Be sure to disable debugging once done:
diag deb dis
diag deb app urlfilter 0

Related Articles

Troubleshooting Tip: WEB filtering rating problems when using FortiGuard rating by IP and URL

Technical Tip: Web site appears to be placed in wrong category by FortiGuard web filtering