Fortinet Fortigate-5000 series - Configuring Fortiguard Override Options for a User Group

User User group
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 331
Configuring FortiGuard override options for a user group
Go to User > Group and select the Edit icon for a firewall user group. Expand the
FortiGuard Web Filtering Override section.
Figure 216:FortiGuard Web Filtering Override configuration
FortiGuard Web
Filtering Override
Available only if Type is Firewall.
Configure Web Filtering override capabilities for this group.
See “Configuring FortiGuard override options for a user group” on
page 331.
SSL-VPN User Group
Options
Available only if Type is SSL-VPN.
For detailed instructions about how to configure web-only mode
or tunnel mode operation, see the FortiGate SSL VPN User
Guide.
Note: If you try to add LDAP servers or local users to a group configured for administrator
authentication, an “Entry not found” error occurs.
Allowed to perform
FortiGuard Web
Filtering overrides
Select to allow members of this group to request an override on the
FortiGuard Web Filtering Block page. The firewall protection profile
governing the connection must have FortiGuard overrides enabled.
The protection profile designates one user group as the Override
Group. Members of the Override Group can authenticate on the
FortiGuard Web Filter Block Override page to access the blocked
site.
For detailed information see “FortiGuard - Web Filter” on page 373.
Override Scope The override can apply to just the user who requested the override,
or include others. Make a selection from the drop-down list to
include:
User Only the user
User Group The user group to which the user belongs
IP Any user at the user’s IP address
Profile Any user with the specified protection profile of the
user group
Ask Authenticating user, who chooses the override
scope
Override Type Select from the drop-down list to allow access to:
Directory Only the lowest level directory in the URL
Domain The entire website domain
Categories The FortiGuard category
Ask Authenticating user, who chooses the override
type