Web Filter
For Windows, macOS, and Linux profiles, you must enable FortiProxy (Disable Only When Troubleshooting) on the System Settings tab to use the Web Filter options.
|
Configuration |
Description |
|
|---|---|---|
|
Web Filter |
Enable or disable web filtering. |
|
|
General |
||
|
|
Client Web Filtering When On-Net |
Enable client web filtering when on-net. Only available for Windows and macOS profiles. This setting affects the Block Access to Malicious Websites setting in AntiVirus Protection. |
|
|
Log All URLs |
Enable to log all URLs. |
|
|
Log User Initiated Traffic |
Enable to log user initiated traffic. |
|
|
Show Bubble Notification When HTTPS Site Is Blocked |
Enable to show a bubble notification when an HTTPS site is blocked. |
|
|
Enable Safe Search |
Enable safe search. When Safe Search is enabled, the endpoint's Google search is set to Restricted mode, and YouTube access is set to Strict Restricted access. To set YouTube access to Moderate Restricted or Unrestricted YouTube access, you can disable Safe Search and configure Google Search and YouTube access with the Google Admin Console instead of FortiClient EMS. |
|
Site Categories |
Select to enable site categories from FortiGuard. When site categories are disabled, FortiClient is protected by the exclusion list. See the FortiGuard website for descriptions of the available categories and subcategories. For all categories below, you can configure an action for the entire site category by selecting one of the following:
You can also click the + button beside the site category to view all subcategories and configure individual actions (Block, Warn, Allow, Monitor) for each subcategory. Each site category's subcategories are listed below. |
|
|
|
Adult/Mature Content |
|
|
|
Bandwidth Consuming |
|
|
|
General Interest-Business |
|
|
|
General Interest-Personal |
|
|
|
Potentially Liable |
|
|
|
Security Risk |
|
|
Unrated |
|
|
|
|
Rate IP Addresses |
Enable to have FortiClient request the rating of the site by URL and IP address separately, providing additional security against attempts to bypass the FortiGuard Web Filter. If the rating determined by the domain name and the rating determined by the IP address differ, the Action that is enforced will be determined by a weighting assigned to the different categories. The higher weighted category will take precedence in determining the action. This will have the side effect that sometimes the Action will be determined by the classification based on the domain name and other times it will be determined by the classification that is based on the IP address. FortiGuard Web Filter ratings for IP addresses are not updated as quickly as ratings for URLs. This can sometimes cause FortiClient to allow access to sites that should be blocked, or to block sites that should be allowed. An example of how this would work would be if a URL's rating based on the domain name indicated that it belonged in the category Lingerie and Swimsuit, which is allowed but the category assigned to the IP address was Pornography which has an action of Block, because the Pornography category has a higher weight the effective action is Block. |
|
|
Allow websites when rating error occurs |
Configure the action to take with all websites when FortiGuard is temporarily unavailable. This may occur when an endpoint is forced to access a network via a captive portal. FortiClient takes the configured action until contact is reestablished with FortiGuard. Available options are:
|
|
Exclusion List |
||
|
Action |
Select one of the following actions:
|
|
|
URL |
Enter specific URLs to allow, block, or monitor. |
|
|
Type |
Select one of the following types:
Wildcard characters and Perl Compatible Regular Expressions (PCRE) can be used. |
|