However, overriding the way a website gets categorized needs to be done on the FortiGate itself.
To do this :
- Go to Security Profiles | Web Rating Overrides.
- Select Create New and enter the URL of the Website to recategorize. (Do not use wildcard expressions when typing in the URL)
- Select the Lookup Rating button to verify the current categorization that is being assigned to the URL.
- Change the Category field and the Sub-Category field to a more appropriate option for the URL and click OK.
Be aware that categorization works on the entire URL and Fastvue Reporter often only shows the domain (in Overview Reports and the Live Dashboards).
For example, mysite.com may be categorized as Weapons which on the surface may not seem accurate. However, if the full URL is actually mysite.com/guns/ak47.jpg then the reason for the categorization is obvious.
The Fastvue Site Clean engine may also add some confusion here. For example, we found an instance where pandora.com was showing as 'Malicious Sites'. But it was p-cdn.com (the CDN used by pandora) that a firewall (not FortiGate) was categorizing as Malicious Sites.
Finding Full URLs and Categories
You can find the full URLs and how they're being categorized by running Activity Reports in Fastvue Reporter. To do this, go to Reports | Activity Report and select the filter URL 'Contains' mysite.com.
The report will show all browsing sessions to URLs that contain that keyword. Click the rows in the report to expand the browsing sessions and view the full URLs and URL Categories.
Alternatively, run an Activity Report on the Category itself to see all sites assigned to that category. To do this, use the filter Category 'Equal to' Weapons (for example). Again, click the rows in the report to expand the sessions and view the full URLs and categories.