Warning prompt per domain

When you are configuring web filter profiles and setting the action to warn for a web filter category, the default action is to allow access to that category for the configured time. See Web profile override.

Alternatively, the CLI may be used to set the presentation of a warning prompt for individual domains within a given category. By requiring users to acknowledge the desire to proceed on each domain within a category, subsequent visits to domains in the same category within the warn-duration provide the same experience as the initial domain. They are not transparently allowed and maintain a consistent experience for the category.

This feature requires deep inspection. Using certificate inspection is not supported and will provide inconsistent results and logs.

To configure a warning prompt:

config webfilter profile
    edit <web_filter_name>
        config ftgd-wf
            config filters
                edit <filter_id>
                    set category <category_id>
                    set action warning
                    set warning-prompt per-domain
                next
            end
        end
    next
end