Web Filter

Web Filter

For Windows, macOS, and Linux profiles, you must enable FortiProxy (Disable Only When Troubleshooting) on the System Settings tab to use the Web Filter options.

Configuration		Description
Web Filter		Enable or disable web filtering.
General
	Client Web Filtering When On-Net	Enable client web filtering when on-net. Only available for Windows and macOS profiles. This setting affects the Block Access to Malicious Websites setting in AntiVirus Protection.
	Log All URLs	Enable to log all URLs.
	Log User Initiated Traffic	Enable to log user initiated traffic.
	Show Bubble Notification When HTTPS Site Is Blocked	Enable to show a bubble notification when an HTTPS site is blocked.
	Enable Safe Search	Enable safe search. Only available for Chromebook profiles. When safe search is enabled, the endpoint's Google search is set to Restricted mode, and YouTube access is set to Strict Restricted access. To set YouTube access to Moderate Restricted or Unrestricted YouTube access, you can disable Safe search and configure Google Search and YouTube access with the Google Admin Console instead of FortiClient EMS for Chromebooks.
Site Categories		Select to enable site categories from FortiGuard. When site categories are disabled, FortiClient is protected by the exclusion list. See the FortiGuard website for descriptions of the available categories and subcategories. For all categories below, you can configure an action for the entire site category by selecting one of the following: Block Warn Allow Monitor You can also click the + button beside the site category to view all subcategories and configure individual actions (Block, Warn, Allow, Monitor) for each subcategory. Each site category's subcategories are listed below.
	Adult/Mature Content	Abortion Advocacy Organizations Alcohol Alternative Beliefs Dating Gambling Lingerie and Swimsuit Marijuana Nudity and Risque Other Adult Materials Pornography Sex Education Sports Hunting and War Games Tobacco Weapons (Sales)
	Bandwidth Consuming	File Sharing and Storage Freeware and Software Downloads Internet Radio and TV Internet Telephony Peer-to-peer File Sharing Streaming Media and Download
	General Interest-Business	Armed Forces Business Charitable Organizations Finance and Banking General Organizations Government and Legal Organizations Information Technology Information and Computer Security Online Meeting Remote Access Search Engines and Portals Secure Websites Web Analytics Web Hosting Web-based Applications
	General Interest-Personal	Advertising Arts and Culture Auction Brokerage and Trading Child Education Content Servers Digital Postcards Domain Parking Dynamic Content Education Entertainment Folklore Games Global Religion Health and Wellness Instant Messaging Job Search Meaningless Content Medicine News and Media Newsgroups and Message Boards Personal Privacy Personal Vehicles Personal Websites and Blogs Political Organizations Real Estate Reference Restaurant and Dining Shopping Social Networking Society and Lifestyles Sports Travel Web Chat Web-based Email
	Potentially Liable	Child Abuse Discrimination Drug Abuse Explicit Violence Extremist Groups Hacking Illegal or Unethical Plagiarism Proxy Avoidance
	Security Risk	Dynamic DNS Malicious Websites Newly Observed Domain Newly Registered Domain Phishing Spam URLs
	Unrated
	Rate IP Addresses	Enable to filter URLs and resolved IP addresses at the same time.
	Allow websites when rating error occurs	Configure the action to take with all websites when FortiGuard is temporarily unavailable. FortiClient takes the configured action until contact is reestablished with FortiGuard. Available options are: Block: Deny access to any websites Warn: Display in-browser warning to user, with an option to proceed to the website Allow: Allow full, unfiltered access to all websites Monitor: Log the site access
Exclusion List
Action		Select one of the following actions: Allow Block Monitor
URL		Enter specific URLs to allow, block, or monitor.
Type		Select one of the following types: Simple Wildcard Regular Expression Wildcard characters and Perl Compatible Regular Expressions (PCRE) can be used.

Web Filter

For Windows, macOS, and Linux profiles, you must enable FortiProxy (Disable Only When Troubleshooting) on the System Settings tab to use the Web Filter options.

Configuration		Description
Web Filter		Enable or disable web filtering.
General
	Client Web Filtering When On-Net	Enable client web filtering when on-net. Only available for Windows and macOS profiles. This setting affects the Block Access to Malicious Websites setting in AntiVirus Protection.
	Log All URLs	Enable to log all URLs.
	Log User Initiated Traffic	Enable to log user initiated traffic.
	Show Bubble Notification When HTTPS Site Is Blocked	Enable to show a bubble notification when an HTTPS site is blocked.
	Enable Safe Search	Enable safe search. Only available for Chromebook profiles. When safe search is enabled, the endpoint's Google search is set to Restricted mode, and YouTube access is set to Strict Restricted access. To set YouTube access to Moderate Restricted or Unrestricted YouTube access, you can disable Safe search and configure Google Search and YouTube access with the Google Admin Console instead of FortiClient EMS for Chromebooks.
Site Categories		Select to enable site categories from FortiGuard. When site categories are disabled, FortiClient is protected by the exclusion list. See the FortiGuard website for descriptions of the available categories and subcategories. For all categories below, you can configure an action for the entire site category by selecting one of the following: Block Warn Allow Monitor You can also click the + button beside the site category to view all subcategories and configure individual actions (Block, Warn, Allow, Monitor) for each subcategory. Each site category's subcategories are listed below.
	Adult/Mature Content	Abortion Advocacy Organizations Alcohol Alternative Beliefs Dating Gambling Lingerie and Swimsuit Marijuana Nudity and Risque Other Adult Materials Pornography Sex Education Sports Hunting and War Games Tobacco Weapons (Sales)
	Bandwidth Consuming	File Sharing and Storage Freeware and Software Downloads Internet Radio and TV Internet Telephony Peer-to-peer File Sharing Streaming Media and Download
	General Interest-Business	Armed Forces Business Charitable Organizations Finance and Banking General Organizations Government and Legal Organizations Information Technology Information and Computer Security Online Meeting Remote Access Search Engines and Portals Secure Websites Web Analytics Web Hosting Web-based Applications
	General Interest-Personal	Advertising Arts and Culture Auction Brokerage and Trading Child Education Content Servers Digital Postcards Domain Parking Dynamic Content Education Entertainment Folklore Games Global Religion Health and Wellness Instant Messaging Job Search Meaningless Content Medicine News and Media Newsgroups and Message Boards Personal Privacy Personal Vehicles Personal Websites and Blogs Political Organizations Real Estate Reference Restaurant and Dining Shopping Social Networking Society and Lifestyles Sports Travel Web Chat Web-based Email
	Potentially Liable	Child Abuse Discrimination Drug Abuse Explicit Violence Extremist Groups Hacking Illegal or Unethical Plagiarism Proxy Avoidance
	Security Risk	Dynamic DNS Malicious Websites Newly Observed Domain Newly Registered Domain Phishing Spam URLs
	Unrated
	Rate IP Addresses	Enable to filter URLs and resolved IP addresses at the same time.
	Allow websites when rating error occurs	Configure the action to take with all websites when FortiGuard is temporarily unavailable. FortiClient takes the configured action until contact is reestablished with FortiGuard. Available options are: Block: Deny access to any websites Warn: Display in-browser warning to user, with an option to proceed to the website Allow: Allow full, unfiltered access to all websites Monitor: Log the site access
Exclusion List
Action		Select one of the following actions: Allow Block Monitor
URL		Enter specific URLs to allow, block, or monitor.
Type		Select one of the following types: Simple Wildcard Regular Expression Wildcard characters and Perl Compatible Regular Expressions (PCRE) can be used.

EMS Administration Guide

Web Filter

Web Filter

Web Filter