Web Filtering Multiple Groups
I am trying to get web filter setup on a Fortigate 200E running on 5.4.
I have managed to link my AD to my Fortigate. What i wanted to do was create a base level group which has most groups restricted e.g. social networking, internet radio and tv, etc.
What i then wanted to do was be able to create additional groups where they get access to different things e.g. marketing get social networking, internet radio and tv and HR get social networking and job search. The groups in this case could be called:
That seems fairly straightforward. What i have trouble with is how do i have cumulative groups where as I add multiple groups to a user, that builds their access e.g. if i had the following groups:
Internet Radio and TV
Marketing (has above)
HR (has social networking and job search)
Management (All categories except security)
If a user is part of multiple above groups, how would it work? Would the overall access be a cumulative of all the groups? I am moving from a websense product which allows you to set a category to undefined for certain groups so that it isn't blocked at the default level but looks to other groups to see if its allowed or not. Hope that makes sense.