Web Risk Overrides

You can use risk level as a parameter for policy matching and web filtering. The policy or web filter action applies when the risk score of the URL is within the score range of the specified risk level (see Web Filter Risk Level). FortiProxy provides the following predefined risk levels (read-only):

Risk level	Score range	Description
high	91-100	Strong confidence of malicious intent.
suspicious	71-90	Medium confidence of malicious intent.
moderate	51-70	Generally benign with a potential risk of attack.
low	21-50	Low predictive risk of attack.
trustworthy	1-20	Very low predictive risk of attack.
unrated	0	The URL does not exist in FortiGuard DB or the risk score of the URL is unknown.

To define the risk score of a website in the GUI:

1. Go to Security Profiles > Web Risk Overrides.

2. Click Create New or select an existing entry and click Edit.

3. specify the URL of the website.

4. Specify a desired risk score for the website.

5. Click OK.

To define the risk score of a specific website in the CLI:

config webfilter ftgd-local-risk

edit "www.ubc.ca"

set risk-score 22

next

end