FortiGate Web Filtering is a powerful feature that enhances network security by controlling access to web content, preventing users from visiting malicious or inappropriate websites. This guide will walk you through setting up and configuring FortiGate Web Filtering using both the GUI and CLI methods to protect your network effectively.

Introduction to FortiGate Web Filtering

Web filtering is a critical component of network security, helping organizations enforce internet usage policies, reduce exposure to threats, and increase productivity. FortiGate’s Web Filtering feature is part of the FortiGuard Security Services, offering real-time protection against harmful web content and categorizing websites into predefined groups.

Trending

Top FortiGate Firewall Security Best Practices in 2025

Benefits of FortiGate Web Filtering

• Security: Blocks access to malicious, phishing, and malware-infested websites.
• Productivity: Restricts non-work-related sites like social media or streaming services.
• Compliance: Helps organizations adhere to industry regulations by controlling web access.
• Customizability: Allows the creation of custom web filtering rules based on categories, URLs, and users.

Configuring FortiGate Web Filtering via GUI

Step 1: Enable Web Filtering

1. Log in to the FortiGate web interface.
2. Navigate to Security Profiles > Web Filter.
3. Click Create New to add a new web filter profile.
4. Name the profile and configure filtering options.

Step 2: Configure Web Filtering Categories

1. Under FortiGuard Categories, enable Category Filtering.
2. Select categories to block (e.g., Malware, Phishing, Adult Content, Social Media).
3. Choose the action for each category (Block, Monitor, Warning, Allow).

Step 3: Add Custom URL Filters

1. Navigate to the Static URL Filter section.
2. Click Create New and enter the URL or wildcard (e.g., *.example.com).
3. Set the action (Allow, Block, Monitor).
4. Click OK to save the changes.

Step 4: Apply the Web Filter to a Firewall Policy

1. Go to Policy & Objects > Firewall Policy.
2. Select an existing policy or create a new one.
3. Under Security Profiles, enable Web Filter and select the configured profile.
4. Click OK to apply the policy.

Configuring FortiGate Web Filtering via CLI

Step 1: Enable Web Filtering Profile

config webfilter profile
    edit "Web_Filter_Profile"
    set comment "Web filtering policy for network security"
    config ftgd-wf
        unset options
        set category-action 52 block
        set category-action 53 block
        set category-action 54 monitor
    end
    config web
        edit 1
        set url "*.example.com"
        set action block
    next
    end
next
end

Step 2: Apply Web Filter to a Firewall Policy

config firewall policy
    edit 10
    set name "Internet Access"
    set srcintf "lan"
    set dstintf "wan1"
    set action accept
    set schedule "always"
    set service "ALL"
    set utm-status enable
    set webfilter-profile "Web_Filter_Profile"
    next
end

Testing and Monitoring Web Filtering

Verify Web Filtering Logs

1. Navigate to Log & Report > Forward Traffic.
2. Filter logs by Web Filter to check blocked sites.

Test Web Filtering

1. Try accessing a blocked website from a client device.
2. Ensure the site is either blocked or redirected based on the configured policy.

Best Practices for Web Filtering

• Regularly update the FortiGuard Database for up-to-date filtering.
• Use deep SSL inspection for HTTPS filtering.
• Apply user/group-based filtering for better control.
• Monitor web filtering logs for policy effectiveness.

Conclusion

FortiGate Web Filtering is an essential tool for securing your network against web-based threats and enforcing acceptable use policies. By properly configuring web filtering settings via GUI or CLI, organizations can ensure a safer and more productive browsing environment.

1. Fortinet Official Documentation – Web Filtering
2. Fortinet Knowledge Base – Configuring Web Filtering
3. Fortinet Training and Certification – Web Filtering Overview
   

These links provide official and credible sources for configuring and understanding FortiGate Web Filtering.