Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I need a nudge in the right direction with this:

I got Fortigate device with FortiOS4.0 with enabled FortiGuard web filter. I block a category, let's say "freeware download" (example). Now, sites that - FortiGuard decides - serve freeware download are blocked. However, I want to permit one specific, say "somefreewaresite.com" for all users. So I enter administrative override for domain somefreewaresite.com, with scope "profile" (whole profile), allowed off-site links.

Now, somefreewaresite.com is accessible. However, "www.somefreewaresite.com" is still blocked. I could add another override, but this site also uses bunch of other subdomains (down1.somefreewaresite.com, images.somefreewaresite.com). I want to permit ALL subdomains of "somefreewaresite.com". I tried to add wildcarded override (*.somefreewaresite.com), but subdomains still keep getting blocked!

How to add administrative override for domain and ALL its subdomains?

I'm sure I am missing some small detail, thanks to all for help.

share|improve this question

1 Answer 1

So, after research and consulting Fortinet support, I know the solutions.

It needs to be done wia URL filter. You need to head to UTM > URL filter, add a filter and for required domain add select "Exempt" (not "Allow") for action.

If you enter "somefreewaresite.com", then all subdomains are permitted too.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.