Fortinet white logo
Fortinet white logo

Administration Guide

Working Together With URL Pre-Filtering

Working Together With URL Pre-Filtering

By default, URL scanning is done inside a VM. However, if performance is a concern, users can turn on URL Pre-Filtering.

When URL Pre-Filtering is enabled, it will work together with the Scan Profile settings and Web Category settings.

Scenarios

URL Sandboxing Pre-Filtering is Enabled
  1. If the category or URL is Unrated, the URL will be scanned inside the VM.
  2. If the URLs category falls into one defined in the Scan Policy and Object > Web Category page, but is not checked as Benign, a job will be created and the URL will be rated as Suspicious (Low Risk, Medium Risk or High Risk according to category).
  3. If the URLs category falls into one defined in the Scan Policy and Object > Web Category page, but is checked as Benign, a job will be created and the URL will be rated as Clean and will not be scanned inside the VM.
URL Sandboxing Pre-Filtering is Disabled

In this case, all URLs will be scanned inside the VM.

Working Together With URL Pre-Filtering

Working Together With URL Pre-Filtering

By default, URL scanning is done inside a VM. However, if performance is a concern, users can turn on URL Pre-Filtering.

When URL Pre-Filtering is enabled, it will work together with the Scan Profile settings and Web Category settings.

Scenarios

URL Sandboxing Pre-Filtering is Enabled
  1. If the category or URL is Unrated, the URL will be scanned inside the VM.
  2. If the URLs category falls into one defined in the Scan Policy and Object > Web Category page, but is not checked as Benign, a job will be created and the URL will be rated as Suspicious (Low Risk, Medium Risk or High Risk according to category).
  3. If the URLs category falls into one defined in the Scan Policy and Object > Web Category page, but is checked as Benign, a job will be created and the URL will be rated as Clean and will not be scanned inside the VM.
URL Sandboxing Pre-Filtering is Disabled

In this case, all URLs will be scanned inside the VM.