Fortinet FortiGate Series Administration Guide

Web Filter Order of web filtering
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903 549
http://docs.fortinet.com/ • Feedback
Web Filter
This chapter describes how to configure FortiGate web filtering for HTTP traffic. If your
FortiGate unit supports SSL content scanning and inspection you can also configure web
filtering for HTTPS traffic. For information about SSL content scanning and inspection, see
“SSL content scanning and inspection” on page 481. if your FortiGate unit does not
support HTTPS content scanning and inspection you can configure URL filtering for
HTTPS traffic.
The three main sections of the web filtering function, the Web Content Filter, the URL
Filter, and the FortiGuard Web filter, interact with each other in such a way as to provide
maximum control and protection for the Internet users.
This section provides an introduction to configuring web filtering. For more information see
the FortiGate UTM User Guide.
If you enable virtual domains (VDOMs) on the FortiGate unit, web filtering is configured
separately for each virtual domain. For details, see “Using virtual domains” on page 159.
This section describes:
• Order of web filtering
• How web filtering works
• Web filter controls
• Web content filter
• URL filter
• FortiGuard - Web Filter
Order of web filtering
Web filters are applied in a specific order:
1 URL Exempt (Web Content Exempt List)
2 URL Block (Web URL Block)
3 URL Block (Web Pattern Block)
4 FortiGuard Web Filtering (Also called Category Block)
5 Content Filter (Web Content Filter)
6 Script Filter (Web Script Filter)
7 Antivirus scanning
The URL filter list is processed in order from top to bottom. An exempt match stops all
further checking including AV scanning. An allow match exits the URL filter list and checks
the other web filters.
Local ratings are checked prior to other FortiGuard Web Filtering categories.
The FortiGate unit applies the rules in this order and failure to comply with a rule will
automatically block a site despite what the setting for later filters might be.

Fortinet FortiGate Series Specifications

General

Brand	Fortinet
Model	FortiGate Series
Category	Firewall
Language	English