Toggle it , click Apply , then toggle it back On and click Apply again. Wait approximately 15 minutes for the changes to propagate. 2. Verify the URL and Category in CLI
If you're experiencing issues with FortiGate web rating override not working, here are some potential causes and troubleshooting steps:
And the override? Overrides only work when the FortiGuard rating is successful . If the rating fails, the override is never even checked. The firewall sees an unrated URL and says, “I don’t know this site, and I can’t check, so… block.”
“Marcus… the new sexual harassment training video is stuck. The LMS says ‘Category Blocked: Adult / Sex Education.’” fortigate web rating override not working
The specific syntax used in the override determines what it matches. A common mistake is defining the override too specifically or too broadly.
It was 11:47 PM on a Friday. Marcus, the sole network admin for a mid-sized logistics company, was finally shutting down his laptop. His phone buzzed. It was Carla from HR.
Run these commands in the CLI:
“No problem, Carla. I’ll check the FortiGate.”
action: block – reason: rating-error
The fastest way to force the FortiGate to recognize a new rating is to toggle the web filter cache. Navigate to . Locate the Web Filter Cache setting. Toggle it , click Apply , then toggle
action: accept – reason: static-url-filter
Overrides are global in terms of categorization, but their effect depends on which Web Filter profile is used in a specific firewall policy . Step-by-Step Troubleshooting Guide 1. Clear the FortiGuard Cache