Fortinet black logo

Handbook

Web Profile Overrides

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:247180
Download PDF

Web Profile Overrides

This feature allows administrators to grant temporary access to sites that are otherwise blocked by a web filter profile. The temporary access can be granted to a user, user group, or source IP address. The time limit can be set in days, hours, or minutes. The default is 15 minutes.

Temporary access can also be granted to a user, user group, or source IP address by enabling Allow users to override blocked categories in a Web Filter security profile and applying that profile to the appropriate policy. In this scenario, the user will have to authenticate to gain access.

When Web Profile Overrides is in effect, a blocked access page or replacement message will not appear and authentication will not be required.

note icon

If your FortiGate is operating in flow-based inspection and policy-based NGFW mode, then you cannot create a web profile override.

Creating a Web Profile Override

Before creating a Web Profile Override, you will have to configure a user or user group if not granting temporary access to a Source IP. You will also have to configure the Web Filter security profile to be applied to the override.

  1. Go to Security Profiles > Web Profile Overrides.
  2. Select Create New.

  3. Select:
    • The Scope Range: User and User Group should be previously configured under User & Device
    • The Original Profile that applied to the scope range.
    • The New Profile to apply for the override
    • The time when the override Expires; default is 15 minutes

Web Profile Overrides

This feature allows administrators to grant temporary access to sites that are otherwise blocked by a web filter profile. The temporary access can be granted to a user, user group, or source IP address. The time limit can be set in days, hours, or minutes. The default is 15 minutes.

Temporary access can also be granted to a user, user group, or source IP address by enabling Allow users to override blocked categories in a Web Filter security profile and applying that profile to the appropriate policy. In this scenario, the user will have to authenticate to gain access.

When Web Profile Overrides is in effect, a blocked access page or replacement message will not appear and authentication will not be required.

note icon

If your FortiGate is operating in flow-based inspection and policy-based NGFW mode, then you cannot create a web profile override.

Creating a Web Profile Override

Before creating a Web Profile Override, you will have to configure a user or user group if not granting temporary access to a Source IP. You will also have to configure the Web Filter security profile to be applied to the override.

  1. Go to Security Profiles > Web Profile Overrides.
  2. Select Create New.

  3. Select:
    • The Scope Range: User and User Group should be previously configured under User & Device
    • The Original Profile that applied to the scope range.
    • The New Profile to apply for the override
    • The time when the override Expires; default is 15 minutes