Locale : english Service : Web - filter Status : Enable License : Contract Service : Antispam Status : Disable Service : Virus Outbreak Prevention Status : Disable Num. This will show a list of FortiGuard servers this Fortigate is trying to reach for Web Filtering rating and their status. If the resolving is OK, next step is this: If timings are unusually high and in red, there could be network connectivity problem, we will look at next.įirst step in checking connectivity to FortiGuard servers is successful DNS resolving by Fortigate of the following hostnames:Įven better check is to run ping exe ping to all the hostnames above to see if the Fortigate can resolve AND can reach them. Also pay attention to the widget on the same page in the right bottom corner FortiGuard Filter Rating Servers, it shows real time stats and IP addresses of the servers the Fortigate is trying to reach. To check actual connectivity to the FortiGuard servers - on the same page, under Filtering subsection, there is Test Connectivity button to push. If you see it red, it is most probably a license/subscription issue to be checked with Fortinet TAC, as subscription checks are done once in a while and are cached. This checks subscription license status, but not always detects connection to the FortiGuard status. It means that if for any reason Fortigate cannot reach Fortiguard servers and it has security rules with Web Filtering by Category configured - those rules will BLOCK users access to ANY website, not just malicious ones.įirst, as emergency but not advisable measure, you can click in Security Profiles -> Web Filter -> FortiGuard - the Web Filtering status should be in green.
Most critical of them is Web Filter rating query - if your Fortigate cannot get answer what category the web site belongs to, access to this web site will be blocked by default. Periodic signatures updates for IPS/AppControl/AntiVirus.Real-time querying for visited by users web sites rating.Periodic checking of Fortigate subscription/license validity for Web Filtering/AppControl/AntiVirus/AntiSpam/DNS Filtering.Fortiguard is a subscription based service from Fortinet, where your Fortigate queries their servers in real-time for various services:
0 kommentar(er)
