Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need a nudge in the right direction with this:

I got Fortigate device with FortiOS4.0 with enabled FortiGuard web filter. I block a category, let's say "freeware download" (example). Now, sites that - FortiGuard decides - serve freeware download are blocked. However, I want to permit one specific, say "" for all users. So I enter administrative override for domain, with scope "profile" (whole profile), allowed off-site links.

Now, is accessible. However, "" is still blocked. I could add another override, but this site also uses bunch of other subdomains (, I want to permit ALL subdomains of "". I tried to add wildcarded override (*, but subdomains still keep getting blocked!

How to add administrative override for domain and ALL its subdomains?

I'm sure I am missing some small detail, thanks to all for help.

share|improve this question

So, after research and consulting Fortinet support, I know the solutions.

It needs to be done wia URL filter. You need to head to UTM > URL filter, add a filter and for required domain add select "Exempt" (not "Allow") for action.

If you enter "", then all subdomains are permitted too.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.