Web Risk Overrides
You can use risk level as a parameter for policy matching and web filtering. The policy or web filter action applies when the risk score of the URL is within the score range of the specified risk level (see Web Filter Risk Level). FortiProxy provides the following predefined risk levels (read-only):
|
Risk level |
Score range |
Description |
|---|---|---|
| high |
91-100 |
Strong confidence of malicious intent. |
| suspicious |
71-90 |
Medium confidence of malicious intent. |
| moderate |
51-70 |
Generally benign with a potential risk of attack. |
| low |
21-50 |
Low predictive risk of attack. |
| trustworthy |
1-20 |
Very low predictive risk of attack. |
| unrated |
0 |
The URL does not exist in FortiGuard DB or the risk score of the URL is unknown. |
To define the risk score of a website in the GUI:
-
Go to Security Profiles > Web Risk Overrides.
-
Click Create New or select an existing entry and click Edit.
-
specify the URL of the website.
-
Specify a desired risk score for the website.
-
Click OK.
To define the risk score of a specific website in the CLI:
config webfilter ftgd-local-risk
edit "www.ubc.ca"
set risk-score 22
next
end