Hot!Category Override not working after upgrade to 6.0.9

Author
AlexFeren
Gold Member
  • Total Posts : 164
  • Scores: 6
  • Reward points: 0
  • Joined: 2011/10/05 17:04:08
  • Status: offline
2020/05/29 08:57:55 (permalink)
0

Category Override not working after upgrade to 6.0.9

Prior to upgrade from 5.6.11 to 6.0.9, I had a Local Rating Override of site "{redacted}-VPN.com" from FortiGuard Category "Proxy Avoidance" to Local Category "VPN". I then allowed the "VPN" Category is a Web-filter Profile associated with firewall rule. However, after the upgrade, this override is no longer working and access to site is denied.
 
Note: access is denied for HTTPS request, while HTTP requests are allowed.
 
Is 6.0.9 doing rating overrides differently, and is so, how to effect it?
 
Here's configuration in 5.6.11:
config webfilter ftgd-local-rating
edit "{redacted}.com"
set rating 140
next
end

config webfilter ftgd-local-cat
edit "VPN"
set id 140
next
:
end

config webfilter profile
:
edit "Clone of default"
set comment "Default web filtering."
set inspection-mode flow-based
config ftgd-wf
set options rate-server-ip
set category-override 140
config filters
:
edit 88
set category 140
next
:
end
end
next
end

After upgrade to 6.0.9, the configuration's identical except that "set category-override 140" doesn't exist. (FortiOS CLI Reference for 6.0.9 is no longer showing "category-override" parameter.)
 
config firewall ssl-ssh-profile
    edit "certificate-inspection"
        set comment "Read-only SSL handshake inspection profile."
        config https
            set ports 443
            set status certificate-inspection
        end
        config ftps
            set status disable
        end
        config imaps
            set status disable
        end
        config pop3s
            set status disable
        end
        config smtps
            set status disable
        end
        config ssh
            set ports 22
        end
    next
end

Also, the traffic to the site is now denied:
FWF # execute log filter dump
category: webfilter
device: disk
start-line: 11
view-lines: 10
max-checklines: 0
HA member:
Filter:
Oftp search string:

FWF# execute log display
35 logs found.
10 logs returned.

1: date=2020-05-30 time=01:10:09 logid="0316013056" type="utm" subtype="webfilter" eventtype="ftgd_blk" level="warning" vd="root" eventtime=1590765009 policyid=1 sessionid=614 srcip={redacted} srcport=51237 srcintf="wire_less_ssw" srcintfrole="lan" dstip={redacted} dstport=443 dstintf="wan2" dstintfrole="wan" proto=6 service="HTTPS" hostname="{redacted}-VPN.com" profile="Clone of default" action="blocked" reqtype="direct" url="/" sentbyte=517 rcvdbyte=1460 direction="incoming" msg="URL belongs to a denied category in policy" method="domain" cat=59 catdesc="Proxy Avoidance" crscore=40 crlevel="high"
 
 
post edited by AlexFeren - 2020/05/29 09:49:04
#1

9 Replies Related Threads

    Toshi Esumi
    Expert Member
    • Total Posts : 2275
    • Scores: 219
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/05/29 13:46:11 (permalink)
    0
    I don't remember how 5.6 config looked like for web category filtering. But at least with 6.0, all allowed category wouldn't show up under "config webfilter profile/edit "VPN"" because "Allow" is the default action in the file so you can't even set "set action allow" under "edit xx". Do allow that category in CLI, you need to remove that entry.
    If you have doubt, just create a new profile and set all categorioes to "Allow". You should see almost empty profile. Since you allowed "VPN" category, it's expected not showing up there.
     
    By the way, does this happened to be HTTPS site? And are you enabling at least "certificate-inspection"? I think it started being required since 6.0.
     
     
    #2
    AlexFeren
    Gold Member
    • Total Posts : 164
    • Scores: 6
    • Reward points: 0
    • Joined: 2011/10/05 17:04:08
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/05/30 01:49:37 (permalink)
    0
    Thanks for taking time to answer...
     
    > And are you enabling at least "certificate-inspection"? I think it started being required since 6.0.
    doesn't above "config firewall ssl-ssh-profile" show this?
     
    #3
    Toshi Esumi
    Expert Member
    • Total Posts : 2275
    • Scores: 219
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/05/30 08:49:03 (permalink)
    0
    At the policies.
    #4
    AlexFeren
    Gold Member
    • Total Posts : 164
    • Scores: 6
    • Reward points: 0
    • Joined: 2011/10/05 17:04:08
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/05/30 17:13:21 (permalink)
    0
    Above “firewall ssl-ssh-profile” profile “certificate-inspection“is applied on firewall policies.
    As I’ve written, override worked in 5.6.11, doesn’t work in 6.0.9. Only configuration changes made were by upgrade migration.
    post edited by AlexFeren - 2020/05/30 17:14:31
    #5
    AlexFeren
    Gold Member
    • Total Posts : 164
    • Scores: 6
    • Reward points: 0
    • Joined: 2011/10/05 17:04:08
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/06/10 23:35:43 (permalink)
    0
    For posterity,.. acknowledged by Fortinet as a fault with TLS 1.3 sites, but, won't be fixed in 6.0.x.
    #6
    MdMan85
    New Member
    • Total Posts : 5
    • Scores: 2
    • Reward points: 0
    • Joined: 2018/10/01 11:08:28
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/08/28 08:44:20 (permalink)
    0
    I also had this issue, what resolved it for me was creating a new SSL/SSH Inspection under Security Profiles.
     
    Set it to Full Inspection and under Exempt from SSL Inspection put your web categories, for me it populated all the ones that were enabled just had to add the custom white list that I had created. The image below was taken from the system I just got working, let me know if this works for you.
     
    [image]data:image/png;base64,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[/image]
    #7
    AlexFeren
    Gold Member
    • Total Posts : 164
    • Scores: 6
    • Reward points: 0
    • Joined: 2011/10/05 17:04:08
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/08/28 08:50:00 (permalink)
    0
    For posterity, Fortinet TAC supplied Engineering Build IPS Engine. Problem fixed.
    #8
    MdMan85
    New Member
    • Total Posts : 5
    • Scores: 2
    • Reward points: 0
    • Joined: 2018/10/01 11:08:28
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/08/28 08:51:59 (permalink)
    0
    Do you think that's baked into 6.0.10? Upgrading firewalls to 6.0.10 soon
    #9
    AlexFeren
    Gold Member
    • Total Posts : 164
    • Scores: 6
    • Reward points: 0
    • Joined: 2011/10/05 17:04:08
    • Status: offline
    Re: Category Override not working after upgrade to 6.0.9 2020/08/28 16:32:34 (permalink)
    0
    Original TAC response was that it won’t be fixed in 6.0, however, due to request by “premium TAM customer” (not us), it will be in 6.0.11.
    #10
    Jump to:
    © 2020 APG vNext Commercial Version 5.5