system fortiguard url-protection
Use this command to configure content disarm and reconstruction (CDR) URL click protection options.
Syntax
config system fortiguard url-protection
set click-action {allow-with-confirmation | block}
set click-category {all | default | phishing | unrated}
set isolator-category {all | default | phishing | unrated}
set isolator-url-base <string>
set malformed-html-tag-content-action {remove | rewrite}
set neutralize-category {all | default | phishing | unrated}
set remove-category {all | default | phishing | unrated}
set rewrite-category {all | default | phishing | unrated}
set sandbox-click-action {allow-with-confirmation | block | submit-only}
set sandbox-status {enable | disable}
set sandbox-timeout-action {allow | allow-with-confirmation | block}
end
|
Variable |
Description |
Default |
|---|---|---|
| click-action {allow-with-confirmation | block} |
Set the FortiSandbox scan action for the click handling category. |
block |
| click-category {all | default | phishing | unrated} |
Set the URL filter category profile used to authorize URLs on click. |
default |
| isolator-category {all | default | phishing | unrated} |
Set the URL filter category profile used to identify URLs to be rewritten by FortiIsolator. |
unrated |
| isolator-url-base <string> |
Define the rewrite URL base. Enter the prefix |
|
| malformed-html-tag-content-action {remove | rewrite} |
Set the malformed HTML tag content action: remove or rewrite URLs that are not exempted. |
remove |
| neutralize-category {all | default | phishing | unrated} |
Set the URL filter category profile used to identify URLs to neutralize. |
unrated |
| remove-category {all | default | phishing | unrated} |
Set the URL filter category profile used to identify URLs to remove. |
default |
|
Set the URL filter category profile used to identify URLs to rewrite. |
unrated |
|
| rewrite-url-base <string> |
Define the rewrite URL base. Enter the prefix |
|
|
sandbox-click-action {allow-with-confirmation | block | submit-only} |
Set the FortiSandbox click action:
|
allow-with-confirmation |
|
Enable or disable FortiSandbox scanning. |
disable |
|
|
Specify how long (in seconds) you want to wait for FortiSandbox scan results before you take block, allow, or allow with confirmation actions. |
5 |
|
| sandbox-timeout-action {allow | allow-with-confirmation | block} |
Set the FortiSandbox timeout action. When URLs are sent to FortiSandbox for scanning, it may take a while to get the results back. It's recommended to specify how long you want to wait for the results (see sandbox-timeout <integer>) before an action is taken. |
allow |