Fortinet black logo

Administration Guide

Working Together With URL Pre-Filtering

Copy Link
Copy Doc ID 7885f8f7-912a-11e9-81a4-00505692583a:41356
Download PDF

Working Together With URL Pre-Filtering

By default, URL scanning is done inside a VM. However, if performance is a concern, users can turn on URL Pre-Filtering.

When URL Pre-Filtering is enabled, it will work together with the Scan Profile settings and URL Category settings.

Scenarios

URL Sandboxing Pre-Filtering is Enabled
  1. If the category or URL is Unrated, the URL will be scanned inside the VM.
  2. If the URLs category falls into one defined in the Scan Policy > URL Category page, but is not checked as Benign, a job will be created and the URL will be rated as Suspicious (Low Risk, Medium Risk or High Risk according to category).
  3. If the URLs category falls into one defined in the Scan Policy > URL Category page, but is checked as Benign, a job will be created and the URL will be rated as Clean and will not be scanned inside the VM.
URL Sandboxing Pre-Filtering is Disabled

In this case, all URLs will be scanned inside the VM.

Working Together With URL Pre-Filtering

By default, URL scanning is done inside a VM. However, if performance is a concern, users can turn on URL Pre-Filtering.

When URL Pre-Filtering is enabled, it will work together with the Scan Profile settings and URL Category settings.

Scenarios

URL Sandboxing Pre-Filtering is Enabled
  1. If the category or URL is Unrated, the URL will be scanned inside the VM.
  2. If the URLs category falls into one defined in the Scan Policy > URL Category page, but is not checked as Benign, a job will be created and the URL will be rated as Suspicious (Low Risk, Medium Risk or High Risk according to category).
  3. If the URLs category falls into one defined in the Scan Policy > URL Category page, but is checked as Benign, a job will be created and the URL will be rated as Clean and will not be scanned inside the VM.
URL Sandboxing Pre-Filtering is Disabled

In this case, all URLs will be scanned inside the VM.