Filtering
Web filtering is used to block access to harmful, inappropriate, and dangerous web sites (see FortiGuard filter).
Email filtering is used to detect and block spam messages (see FortiGuard-based filters).
To configure filtering in the GUI:
- Go to System > FortiGuard
- In the Filtering section configure the settings as needed:
Web Filter Cache
Enable/disable web filter cache, and set the amount of time that the FortiGate will store a blocked IP address or URL locally. After the time expires, the FortiGate contacts the FDN to verify the address.
Email Filter Cache
Enable/disable email filter cache, and set the amount of time that the FortiGate will store an email address locally.
FortiGuard filtering services
The protocol and port used to contact the FortiGuard servers. These options can be changed in the CLI.
Filtering service availability
The status of the filtering service. Click Test Connectivity if the filtering service is not available.
Request re-evaluation of a URL's category
Click to re-evaluate a URL category rating on the FortiGuard web filter service.
- Click Apply.
To configure filtering in the CLI:
config system fortiguard
set protocol {https | udp}
set port {443 | 53 | 8888}
set antispam-force-off {enable | disable}
set antispam-cache {enable | disable}
set antispam-cache-ttl <integer>
set antispam-cache-mpercent <percent>
set antispam-timeout <integer>
set webfilter-force-off {enable | disable}
set webfilter-cache {enable | disable}
set webfilter-cache-ttl <integer>
set webfilter-timeout <integer>
end
|
When anycast is enabled (by default) the protocol is HTTPS and the port is 443. |