Viewing top websites and sources by category
You can use FortiGuard web categories to populate the category fields in various FortiView monitors such as FortiView Web Categories, FortiView Websites or FortiView Sources. To view the categories in a monitor, the web filter profile must be configured to at least monitor for a FortiGuard category based on a web filter and applied to a firewall policy for outbound traffic.
To verify the web filter profile is monitor-only:
-
Go to Security Profiles > Web Filter.
-
Double-click a web filter that is applied to an outbound traffic firewall policy. The Edit Web Filter Profile window opens.
-
Ensure FortiGuard Category Based Filter is enabled.
In this example, the General Interest - Business categories are monitor-only.
To create a Web categories monitor:
-
Click Add Monitor. The Add Monitor window opens.
-
In the Search field, type FortiView Web Categories and click the Add button next to the monitor name.
-
In the FortiGate area, select the FortiGate(s) from the dropdown.
-
In the Data Source area, click Best Available Device or Specify to select a device in the security fabric.
-
From the Time Period dropdown, select a time period greater than Now.
-
From the Sort By dropdown, select Browsing Time, Threat Score, Bytes, or Sessions.
-
Click OK. The widget is added to the tree menu.
Viewing the web filter category
The web filter category name appears in the Category column of the dashboard.
Drill down an entry in the table.
Click the Web Sites tab. The category name appears in the Category column.
Click View session logs to a view a list of the session logs. The category name appears in the Category column.
The category name also appears in the Category column in the FortiView Websites monitor and when drilling down in the FortiView Sources monitor.
