Web Filter Risk Level

You can use risk level as a parameter for policy matching and web filtering. The policy or web filter action applies when the risk score of the URL (see Web Risk Overrides) is within the score range of the specified risk level. FortiProxy provides the following predefined risk levels (read-only):

Risk level	Score range	Description
high	91-100	Strong confidence of malicious intent.
low	21-50	Low predictive risk of attack.
moderate	51-70	Generally benign with a potential risk of attack.
suspicious	71-90	Medium confidence of malicious intent.
trustworthy	1-20	Very low predictive risk of attack.
unrated	0	The URL does not exist in FortiGuard DB or the risk score of the URL is unknown.

To define a custom risk level with a desired score range in the GUI:

1. Go to the Security Profiles > Web Filter Risk Level page.

2. Click Create New to create a new entry or select an existing custom risk level and click Edit.

3. Specify the name of the risk level.

4. Specify the low and high scores for the risk level.

5. Click OK.

To add a custom risk level with a desired score range in the CLI:

config webfilter ftgd-risk-level

edit "Good"

set high 30

set low 10

next

end

You can then select the risk level in the risk level dropdown list when you Create or edit a policy or Create or edit a web filter profile.

For example, you can create a risk level Good with a score range of 10-30 and use it in a policy. FortiProxy will then apply the policy for URLs with a risk score between 10-30.