An administrator wants to block https://www.example.com/videos and allow all other URLs on the website. What are two configuration changes that the…

To block a specific URL path within an HTTPS-encrypted website while allowing access to the rest of the site, two key configurations are necessary. First, because the traffic is encrypted with HTTPS, the FortiGate must be able to decrypt and inspect the content to see the full URL path (e.g., /videos). This is accomplished by enabling full SSL inspection (also known as deep inspection). Second, a specific rule must be created to block the target URL. This is done by configuring a static URL filter entry for https://www.example.com/videos and setting the action to Block. These two configurations work together to meet the requirement.

A. Web rating overrides apply to entire domains, not specific URL paths. This would incorrectly block the entire www.example.com website.

C. The video filter profile is a specialized feature designed to control specific streaming platforms (like YouTube or Vimeo), not for blocking arbitrary URL paths.

1. Fortinet FortiOS 7.0.0 Administration Guide

Web Filter

p. 1018: "For HTTPS sites

the FortiGate can only apply a URL filter to the domain name of the site unless SSL deep inspection is enabled." This statement directly confirms the necessity of both full SSL inspection (B) and a URL filter (D) to act on a specific HTTPS path.

2. Fortinet FortiOS 7.0.0 Security Profiles Guide

SSL/SSH Inspection

p. 18: "Full SSL inspection

also known as deep inspection

allows the FortiGate to inspect the content of encrypted traffic... This allows the FortiGate to enforce security features such as... Web Filtering... on HTTPS... traffic." This supports the requirement for full SSL inspection (B).

3. Fortinet FortiOS 7.0.0 Administration Guide

URL filter

p. 1020: This section details the process of creating a URL filter list where an administrator can "Add URLs to the list that you want to block

allow

monitor

or exempt." This supports the use of a static URL filter (D) as the mechanism for blocking the specific URL.