Fortinet FortiGate 50A - Manual (Page 235)

Web filtering URL blocking
FortiGate-50A Installation and Configuration Guide
235
URL blocking
You can block the unwanted web URLs using FortiGate Web URL blocking, FortiGate
Web pattern blocking, and Cerberian web filtering.
• Configuring FortiGate Web URL blocking
• Configuring FortiGate Web pattern blocking
• Configuring Cerberian URL filtering
Configuring FortiGate Web URL blocking
You can configure FortiGate Web URL blocking to block all pages on a website by
adding the top-level URL or IP address. You can also block individual pages on a
website by including the full path and filename of the web page to block.
• Adding URLs to the Web URL block list
• Clearing the Web URL block list
• Downloading the Web URL block list
• Uploading a URL block list
Adding URLs to the Web URL block list
1 Go to Web Filter > Web URL Block.
2 Select New to add a URL to the Web URL block list.
3 Type the URL the you want to block.
Type a top-level URL or IP address to block access to all pages on a website. For
example, www.badsite.com or 122.133.144.155 blocks access to all pages at
this website.
Type a top-level URL followed by the path and filename to block access to a single
page on a website. For example, www.badsite.com/news.html or
122.133.144.155/news.html blocks the news page on this website.
To block all pages with a URL that ends with badsite.com, add badsite.com to
the block list. For example, adding badsite.com blocks access to
www.badsite.com, mail.badsite.com, www.finance.badsite.com, and so
on.
4 Ensure that the Enable checkbox has been selected and then select OK.
Note: Do not include http:// in the URL that you want to block.
Note: Do not use regular expressions in the Web URL block list. You can use regular
expressions in the Web Pattern Block list to create URL patterns to block. See
“Configuring
FortiGate Web pattern blocking” on page 237 .
Note: You can type a top-level domain suffix (for example, “com” without the leading period) to
block access to all URLs with this suffix.
Note: URL blocking does not block access to other services that users can access with a web
browser. For example, URL blocking does not block access to ftp://ftp.badsite.com.
Instead, you can use firewall policies to deny FTP connections.