Skip to main content

Allow-list in Fortinet FortiGate

Ensure users can access phishing simulation landing pages by allow-listing usecure’s domains in FortiGate.

Written by Anna Cunningham
Updated this week

To make sure your end users can reach usecure's landing page URLs when using a Fortinet FortiGate firewall, we recommend allow-listing usecure's domains by adding them to the Static URL Filter in FortiGate.

Note: The guidelines in this article are based on Fortinet's Static URL Filter knowledge base. If your setup differs from the one outlined here, we suggest reaching out to FortiGate for specific instructions for your environment.

Allow-list domains by Static URL Filter

  1. Log into your Fortinet account

  2. Navigate to Security Profiles > Web Filter.

  3. Create a new web filter or select one to edit.

  4. Expand Static URL Filter, enable URL Filter, and select Create.

  5. Enter usecure’s landing page domains.

  6. Select Type: Simple.

  7. Select the Action to take against matching URLs: Allow.

  8. Confirm that Status is enabled.


Allow-list domains using the CLI

1. Go to your Web Filter Profile

Enter:

config webfilter profile
show

Locate the profile name applied to your firewall policy (commonly "default").

To edit a specific profile:

config webfilter profile
edit "default"

Replace "default" with your actual profile name.

2. Check if a URL Filter Table is assigned

While inside the profile, run:

show | grep urlfilter-table

If you see:

set urlfilter-table 1

A table is already assigned, proceed to Step 5.

If nothing returns, you must create and assign a URL Filter Table.

Exit the profile:

end

3. Create a URL Filter Table (If needed)

Create a new URL filter table:

config webfilter urlfilter
edit 1
set name "default"
next
end

Notes:
You can change 1 to another unused ID.

The name "default" can be replaced with any descriptive name.

4. Assign the URL Filter Table to your profile

Re-enter your profile and assign the table:

config webfilter profile
edit "default"
config web
set urlfilter-table 1
end

After this step, the profile now has access to URL filtering entries.

5. Add URL Entries

Now add your required domains.

Example:

config webfilter urlfilter
edit 1
config entries
edit 1
set url "usecure.io"
set action allow
next

edit 2
set url "domain2.com"
set action allow
next

edit 3
set url "domain3.com"
set action allow
next
end

Repeat for all required domains.

Bulk Adding Multiple Domains

If starting from scratch, you can paste a full script containing all domains into the CLI at once.

If you already have entries in the table:

  • Check existing entry numbers:

    config webfilter urlfilter
    edit 1
    show
  • Start at the next available edit number.

AI tools can generate the full CLI block for all required domains if needed.


Next steps

Did this answer your question?