config webfilter urlfilter

Configure URL filter lists.

config webfilter urlfilter
    Description: Configure URL filter lists.
    edit <id>
        set comment {var-string}
        config entries
            Description: URL filter entries.
            edit <id>
                set action [exempt|block|...]
                set antiphish-action [block|log]
                set comment {var-string}
                set dns-address-family [ipv4|ipv6|...]
                set exempt {option1}, {option2}, ...
                set referrer-host {string}
                set status [enable|disable]
                set type [simple|regex|...]
                set url {string}
                set web-proxy-profile {string}
            next
        end
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set include-subdomains [enable|disable]
        set ip-addr-block [enable|disable]
        set ip4-mapped-ip6 [enable|disable]
        set name {string}
        set one-arm-ips-urlfilter [enable|disable]
        set type [profile|category]
        set uuid {uuid}
    next
end

config webfilter urlfilter

Parameter

Description

Type

Size

Default

comment

Optional comments.

var-string

Maximum length: 255

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

disable

Option	Description
enable	Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.
disable	Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

disable

Option	Description
enable	Object is set as a security fabric-wide global object.
disable	Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

root

Option	Description
member	Source of truth for this object is a non-root member of fabric.
local	Source of truth for this object is this security fabric member.
root	Source of truth for this object is the root of the fabric.

ID.

integer

Minimum value: 0 Maximum value: 4294967295

include-subdomains

Enable/disable matching subdomains. Applies only to simple type (default = enable).

option

enable

Option	Description
enable	Enable matching subdomains. Applies only to simple type.
disable	Disable matching subdomains. Applies only to simple type.

ip-addr-block

Enable/disable blocking URLs when the hostname appears as an IP address.

option

disable

Option	Description
enable	Enable blocking URLs when the hostname appears as an IP address.
disable	Disable blocking URLs when the hostname appears as an IP address.

ip4-mapped-ip6

Enable/disable matching of IPv4 mapped IPv6 URLs.

option

disable

Option	Description
enable	Enable matching IPv4 mapped IPv6 URLs.
disable	Disable matching IPv4 mapped IPv6 URLs.

name

Name of URL filter list.

string

Maximum length: 63

one-arm-ips-urlfilter

Enable/disable DNS resolver for one-arm IPS URL filter operation.

option

disable

Option	Description
enable	Enable DNS resolver for one-arm IPS URL filter operation.
disable	Disable DNS resolver for one-arm IPS URL filter operation.

type *

Type of URL filter table (profile or category).

option

profile

Option	Description
profile	URL list for webfilter profile.
category	URL list for local web category override.

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config entries

Parameter

Description

Type

Size

Default

action

Action to take for URL filter matches.

option

exempt

Option	Description
exempt	Exempt matches.
block	Block matches.
allow	Allow matches (no log).
monitor	Allow matches (with log).

antiphish-action

Action to take for AntiPhishing matches.

option

block

Option	Description
block	Block matches.
log	Allow matches with log.

comment

Comment.

var-string

Maximum length: 255

dns-address-family

Resolve IPv4 address, IPv6 address, or both from DNS server.

option

ipv4

Option	Description
ipv4	Resolve IPv4 address from DNS server.
ipv6	Resolve IPv6 address from DNS server.
both	Resolve both IPv4 and IPv6 addresses from DNS server.

exempt

If action is set to exempt, select the security profile operations that exempt URLs skip. Separate multiple options with a space.

option

av web-content activex-java-cookie dlp fortiguard range-block antiphish all

Option	Description
av	AntiVirus scanning.
web-content	Web filter content matching.
activex-java-cookie	ActiveX, Java, and cookie filtering.
dlp	DLP scanning.
fortiguard	FortiGuard web filtering.
range-block	Range block feature.
pass	Pass single connection from all.
antiphish	AntiPhish credential checking.
all	Exempt from all security profiles.

Id.

integer

Minimum value: 0 Maximum value: 4294967295

referrer-host

Referrer host name.

string

Maximum length: 255

status

Enable/disable this URL filter.

option

enable

Option	Description
enable	Enable this URL filter.
disable	Disable this URL filter.

type

Filter type (simple or wildcard). If table type 'profile', regex also supported.

option

simple

Option	Description
simple	Simple URL string.
regex	Regular expression URL string.
wildcard	Wildcard URL string.

url

URL to be filtered.

string

Maximum length: 511

web-proxy-profile

Web proxy profile.

string

Maximum length: 63

config webfilter urlfilter

Configure URL filter lists.

config webfilter urlfilter
    Description: Configure URL filter lists.
    edit <id>
        set comment {var-string}
        config entries
            Description: URL filter entries.
            edit <id>
                set action [exempt|block|...]
                set antiphish-action [block|log]
                set comment {var-string}
                set dns-address-family [ipv4|ipv6|...]
                set exempt {option1}, {option2}, ...
                set referrer-host {string}
                set status [enable|disable]
                set type [simple|regex|...]
                set url {string}
                set web-proxy-profile {string}
            next
        end
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set include-subdomains [enable|disable]
        set ip-addr-block [enable|disable]
        set ip4-mapped-ip6 [enable|disable]
        set name {string}
        set one-arm-ips-urlfilter [enable|disable]
        set type [profile|category]
        set uuid {uuid}
    next
end

config webfilter urlfilter

Parameter

Description

Type

Size

Default

comment

Optional comments.

var-string

Maximum length: 255

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

disable

Option	Description
enable	Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.
disable	Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

disable

Option	Description
enable	Object is set as a security fabric-wide global object.
disable	Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

root

Option	Description
member	Source of truth for this object is a non-root member of fabric.
local	Source of truth for this object is this security fabric member.
root	Source of truth for this object is the root of the fabric.

ID.

integer

Minimum value: 0 Maximum value: 4294967295

include-subdomains

Enable/disable matching subdomains. Applies only to simple type (default = enable).

option

enable

Option	Description
enable	Enable matching subdomains. Applies only to simple type.
disable	Disable matching subdomains. Applies only to simple type.

ip-addr-block

Enable/disable blocking URLs when the hostname appears as an IP address.

option

disable

Option	Description
enable	Enable blocking URLs when the hostname appears as an IP address.
disable	Disable blocking URLs when the hostname appears as an IP address.

ip4-mapped-ip6

Enable/disable matching of IPv4 mapped IPv6 URLs.

option

disable

Option	Description
enable	Enable matching IPv4 mapped IPv6 URLs.
disable	Disable matching IPv4 mapped IPv6 URLs.

name

Name of URL filter list.

string

Maximum length: 63

one-arm-ips-urlfilter

Enable/disable DNS resolver for one-arm IPS URL filter operation.

option

disable

Option	Description
enable	Enable DNS resolver for one-arm IPS URL filter operation.
disable	Disable DNS resolver for one-arm IPS URL filter operation.

type *

Type of URL filter table (profile or category).

option

profile

Option	Description
profile	URL list for webfilter profile.
category	URL list for local web category override.

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config entries

Parameter

Description

Type

Size

Default

action

Action to take for URL filter matches.

option

exempt

Option	Description
exempt	Exempt matches.
block	Block matches.
allow	Allow matches (no log).
monitor	Allow matches (with log).

antiphish-action

Action to take for AntiPhishing matches.

option

block

Option	Description
block	Block matches.
log	Allow matches with log.

comment

Comment.

var-string

Maximum length: 255

dns-address-family

Resolve IPv4 address, IPv6 address, or both from DNS server.

option

ipv4

Option	Description
ipv4	Resolve IPv4 address from DNS server.
ipv6	Resolve IPv6 address from DNS server.
both	Resolve both IPv4 and IPv6 addresses from DNS server.

exempt

If action is set to exempt, select the security profile operations that exempt URLs skip. Separate multiple options with a space.

option

av web-content activex-java-cookie dlp fortiguard range-block antiphish all

Option	Description
av	AntiVirus scanning.
web-content	Web filter content matching.
activex-java-cookie	ActiveX, Java, and cookie filtering.
dlp	DLP scanning.
fortiguard	FortiGuard web filtering.
range-block	Range block feature.
pass	Pass single connection from all.
antiphish	AntiPhish credential checking.
all	Exempt from all security profiles.

Id.

integer

Minimum value: 0 Maximum value: 4294967295

referrer-host

Referrer host name.

string

Maximum length: 255

status

Enable/disable this URL filter.

option

enable

Option	Description
enable	Enable this URL filter.
disable	Disable this URL filter.

type

Filter type (simple or wildcard). If table type 'profile', regex also supported.

option

simple

Option	Description
simple	Simple URL string.
regex	Regular expression URL string.
wildcard	Wildcard URL string.

url

URL to be filtered.

string

Maximum length: 511

web-proxy-profile

Web proxy profile.

string

Maximum length: 63

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

CLI Reference

config webfilter urlfilter

config webfilter urlfilter

config webfilter urlfilter

config entries

config webfilter urlfilter

config webfilter urlfilter

config webfilter urlfilter

config entries