Configuring web filter profiles to block AI and cryptocurrency

The following FortiGuard web filter categories are available:

• Artificial intelligence technology (category 100): sites that offer solutions, insights, and resources related to artificial intelligence (AI).

• Cryptocurrency (category 101): sites that specialize in digital or virtual currencies that are secured by cryptography and operate on decentralized networks.

To configure a web filter profile to block the AI and cryptocurrency categories in the GUI:

1. Go to Security Profiles > Web Filter and click Create New.

2. Enter a name for the web filter profile.

3. In the category table, locate the General Interest - Business section. Select the Artificial Intelligence Technology and Cryptocurrency categories, and set the Action to Block.

   

4. Configure the remaining settings as needed.

5. Click OK.

To configure a web filter profile to block the AI and cryptocurrency categories in the CLI:

config webfilter profile
    edit "webfilter"
        set feature-set proxy
        config ftgd-wf
            unset options
            config filters
                edit 100
                    set category 100
                    set action block    
                next
                edit 101
                    set category 101
                    set action block
                next
                edit 52
                    set category 52
                next
            end
        end
        set log-all-url enable
    next
end

To verify that the categories are blocked:

1. Apply the web filter profile in a firewall policy.

2. On a device that is connected through the FortiGate and uses the policy, visit the test URLs for each category:

   1. http://wfurltest.fortiguard.com/wftest/100.html

   2. http://wfurltest.fortiguard.com/wftest/101.html

   The browser displays a replacement message that the URL is blocked based on the FortiGuard category.

   • Artificial intelligence technology:

     

   • Cryptocurrency:

     

To verify the web filter logs:

1. In the GUI, go to Log & Report > Security Events and click Web Filter.

2. In the CLI, enter the following:

   # execute log filter category utm-webfilter
   # execute log display
   1: date=2023-07-12 time=10:39:18 eventtime=1689183557968026063 tz="-0700" logid="0316013056" type="utm" subtype="webfilter" eventtype="ftgd_blk" level="warning" vd="vdom1" policyid=1 poluuid="996b0a68-2055-51ee-b841-2b3f373c9b37" policytype="policy" sessionid=3258 srcip=10.1.100.31 srcport=35116 srccountry="Reserved" srcintf="port2" srcintfrole="undefined" srcuuid="124f368a-2055-51ee-c7d6-857ab36dd6cb" dstip=154.52.5.202 dstport=443 dstcountry="United States" dstintf="port1" dstintfrole="undefined" dstuuid="124f368a-2055-51ee-c7d6-857ab36dd6cb" proto=6 httpmethod="GET" service="HTTPS" hostname="wfurltest.fortiguard.com" agent="curl/7.68.0" profile="webfilter" action="blocked" reqtype="direct" url="https://wfurltest.fortiguard.com/wftest/101.html" sentbyte=849 rcvdbyte=3633 direction="outgoing" msg="URL belongs to a denied category in policy" ratemethod="domain" cat=101 catdesc="Cryptocurrency"
   
   2: date=2023-07-12 time=10:39:13 eventtime=1689183553021358734 tz="-0700" logid="0316013056" type="utm" subtype="webfilter" eventtype="ftgd_blk" level="warning" vd="vdom1" policyid=1 poluuid="996b0a68-2055-51ee-b841-2b3f373c9b37" policytype="policy" sessionid=3255 srcip=10.1.100.31 srcport=35102 srccountry="Reserved" srcintf="port2" srcintfrole="undefined" srcuuid="124f368a-2055-51ee-c7d6-857ab36dd6cb" dstip=154.52.5.202 dstport=443 dstcountry="United States" dstintf="port1" dstintfrole="undefined" dstuuid="124f368a-2055-51ee-c7d6-857ab36dd6cb" proto=6 httpmethod="GET" service="HTTPS" hostname="wfurltest.fortiguard.com" agent="curl/7.68.0" profile="webfilter" action="blocked" reqtype="direct" url="https://wfurltest.fortiguard.com/wftest/100.html" sentbyte=849 rcvdbyte=3633 direction="outgoing" msg="URL belongs to a denied category in policy" ratemethod="domain" cat=100 catdesc="Artificial Intelligence Technology"