FortiGate Administration Guide - FirewallShop.com

User
User groups
Configuring FortiGuard override options for a user group
Go to User > Group and select the Edit icon for a firewall user group. Expand the
FortiGuard Web Filtering Override section.
Figure 265:FortiGuard Web Filtering Override configuration
Allowed to perform
FortiGuard Web
Filtering overrides
Override Scope
Override Type
Off-site URLs
Select to allow members of this group to request an override on the
FortiGuard Web Filtering Block page. The firewall protection profile
governing the connection must have FortiGuard overrides enabled.
The protection profile may have more than one user group as an
override group. Members of an override group can authenticate on
the FortiGuard Web Filter Block Override page to access the
blocked site.
For detailed information see “FortiGuard - Web Filter” on page 435.
The override can apply to just the user who requested the override,
or include others. Make a selection from the drop-down list to
include:
User
Only the user
User Group The user group to which the user belongs
IP
Any user at the user’s IP address
Profile
Ask
Any user with the specified protection profile of the
user group
Authenticating user, who chooses the override
scope
Select from the drop-down list to allow access to:
Directory Only the lowest level directory in the URL
Domain The entire website domain
Categories The FortiGuard category
Ask
Authenticating user, who chooses the override
type
Select from the drop-down list whether the user can follow links to
sites off of the blocked site:
Allow User can follow links to other sites.
Deny
Ask
User can follow links only to destinations as
defined by Override Type.
Authenticating user chooses whether to allow use
of off-site links.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 391