NSE4_FGT-7.0 · Question #107
A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to…
The correct answer is A. Implement a web filter category override for the specified website. To effectively allow specific team members access to a website while blocking others, implementing a web filter category override for that specified website is the most effective solution.
Question
A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?
Options
- AImplement a web filter category override for the specified website.
- BImplement web filter authentication for the specified website
- CImplement web filter quotas for the specified website.
- DImplement DNS filter for the specified website.
How the community answered
(16 responses)- A81% (13)
- B6% (1)
- D13% (2)
Why each option
To effectively allow specific team members access to a website while blocking others, implementing a web filter category override for that specified website is the most effective solution.
A web filter category override allows an administrator to reclassify a specific URL, which can then be used in a web filter profile applied to a firewall policy, enabling different access rules for different user groups or individual users. By creating a custom category or overriding an existing one, specific policies can be crafted to permit access for designated team members while blocking it for others.
Web filter authentication requires users to authenticate before accessing a site but does not directly implement differential access for specified users versus others; it's more for identification and logging.
Web filter quotas limit the amount of time or bandwidth users can spend on a site, which does not address the requirement of allowing some users access while blocking others entirely.
A DNS filter blocks access at the DNS resolution level for everyone affected by the policy; it does not easily support allowing specific users while blocking others from the same website.
Concept tested: Web filter category overrides for granular access
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/52002/category-overrides
Topics
Community Discussion
No community discussion yet for this question.