Web Filter
For Windows, macOS, and Linux profiles, you must enable FortiProxy (Disable Only When Troubleshooting) on the System Settings tab to use the Web Filter options. Enable or disable the eye icon to show or hide this feature from the end user in FortiClient.
Configuration |
Description |
|
---|---|---|
Web Filter |
Enable or disable web filtering. |
|
General |
||
|
Client Web Filtering When On-Net |
Enable client web filtering when on-net. Only available for Windows and macOS profiles. This setting affects the Block Access to Malicious Websites setting in AntiVirus Protection. |
|
Log All URLs |
Log all URLs. |
|
Log User Initiated Traffic |
Log user-initiated traffic. |
|
Show Bubble Notification When HTTPS Site Is Blocked |
Show a bubble notification when FortiClient blocks an HTTPS site. |
|
Enable Safe Search |
When you enable Safe Search, the endpoint's Google search is set to Restricted mode, and YouTube access is set to Strict Restricted access. To set YouTube access to Moderate Restricted or Unrestricted YouTube access, you can disable Safe Search and configure Google Search and YouTube access with the Google Admin Console instead of FortiClient EMS. |
Site Categories |
Enable site categories from FortiGuard. When site categories are disabled, FortiClient is protected by the exclusion list. See the FortiGuard website for descriptions of the available categories and subcategories. For all categories below, you can configure an action for the entire site category by selecting one of the following:
You can also click the + button beside the site category to view all subcategories and configure individual actions (Block, Warn, Allow, Monitor) for each subcategory. Each site category's subcategories are listed below. |
|
|
Adult/Mature Content |
|
|
Bandwidth Consuming |
|
|
General Interest-Business |
|
|
General Interest-Personal |
|
|
Potentially Liable |
|
|
Security Risk |
|
Unrated |
|
|
|
Rate IP Addresses |
Have FortiClient request the rating of the site by URL and IP address separately, providing additional security against attempts to bypass the FortiGuard Web Filter. If the rating determined by the domain name and the rating determined by the IP address differ, the Action that is enforced is determined by a weighting assigned to the different categories. The higher weighted category takes precedence in determining the action. This has the side effect that sometimes the Action is determined by the classification based on the domain name and other times it is determined by the classification that is based on the IP address. FortiGuard Web Filter ratings for IP addresses are not updated as quickly as ratings for URLs. This can sometimes cause FortiClient to allow access to sites that should be blocked, or to block sites that should be allowed. An example of how this would work would be if a URL's rating based on the domain name indicated that it belonged in the category Lingerie and Swimsuit, which is allowed but the category assigned to the IP address was Pornography which has an action of Block, because the Pornography category has a higher weight the effective action is Block. |
|
Allow websites when rating error occurs |
Configure the action to take with all websites when FortiGuard is temporarily unavailable. This may occur when an endpoint is forced to access a network via a captive portal. FortiClient takes the configured action until contact is reestablished with FortiGuard. Available options are:
|
Exclusion List |
||
Action |
Select one of the following actions:
|
|
URL |
Enter specific URLs to allow, block, or monitor. |
|
Type |
Select one of the following types:
Wildcard characters and Perl Compatible Regular Expressions (PCRE) can be used. |