Using the check and remediate tool
Use the Check & Remediate tool in the FortiPortal Dashboard to check URL access permissions for a specific user. Through this tool, you can also reclassify the website if the category is incorrect.
|
This tool is only when your system administrator has enabled it for your account. |
|
Reclassifying a website affects the entire firewall, not just the user in question. The website is reclassified wherever it is used, including any other policies. |
This tool is accessed through the Authenticated Users widget in the Dashboard.
When the firewall is properly configured to authenticate user traffic, this widget displays the authenticated users.
URLs are categorized into predefined categories in a Web Filter Profile. For example, www.google.com is categorized as Search Engines and Portals.
The firewall policy allows or blocks access based on the action defined for the category in the web filter profile.
Policies must be configured as follows:
-
Select the appropriate Source User and Source User Group.
-
In Security Profiles Options, apply a Web Filter Profile.
-
In Security Profiles Options, set SSL/SSH Inspection to a deep-inspection profile.
-
Set the policy Inspection Mode to Proxy-based.
-
In the web filter, set Feature Set to Proxy-based.
To check and remediate user website access:
-
Go to Insights > Dashboard and, in the Authenticated Users widget, click on the View icon next to the appropriate user.
-
Enter the URL to check, select the Outgoing Interface and Protocol, then click Check Access.
Access to the specified URL is checked on the firewall and displayed in Result.
In this example, the user is restricted access to
www.chess.combecause this website is classified as Games and the web filter profile in the policy blocks access to this category.
-
Click Reclassify.
-
Select Web Category or Remote Category, then select the appropriate new Category and Sub Category for this website.
In this example,
www.chess.comis set to Sub Category Education, an allowed category. -
In the popup, click Install to install your changes to the firewall. You must install the changes before they take effect.
The website is reclassified in the firewall.