Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Isaac_ukk
New Contributor

how to block the below site using web filter

https://search.hdownloadmyinboxhelper.com/?

 

i have added in the site in Url Filter & content filter but still am able to browse this site,

this site helping users to download movies

 

 

1 REPLY 1
Dave_Hall
Honored Contributor

The site itself appears to employ some some sort of browser hijacking, according to google.  If your fgt are not using SSL "Deep-inspection" then certificate-inspection should be used - this causes the fgt to look at the domain name listed on the web site's security certificate - in this case the common name appears to be "downloadmyinboxhelper.com", but other names listed on the security certificate are *.downloadmyinboxhelper.com and *.hdownloadmyinboxhelper.com.  If you want to block this site, you may have better luck using two wildcard URL filter entries; e.g. *.downloadmyinboxhelper.com and *.hdownloadmyinboxhelper.com.   Personally, I would see about "disinfecting" the machines that have this site loaded in the browser as a a "search engine". 

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Labels
Top Kudoed Authors