NSE4_FGT-7.0 · Question #163
A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support…
The correct answer is A. Implement a web filter category override for the specified website. To allow specific team members access to a website while blocking it for others, implementing a web filter category override for the website is the most effective solution.
Question
A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support this request?
Options
- AImplement a web filter category override for the specified website
- BImplement a DNS filter for the specified website.
- CImplement web filter quotas for the specified website
- DImplement web filter authentication for the specified website.
How the community answered
(30 responses)- A83% (25)
- B10% (3)
- C3% (1)
- D3% (1)
Why each option
To allow specific team members access to a website while blocking it for others, implementing a web filter category override for the website is the most effective solution.
Implementing a web filter category override for the specified website allows the administrator to reclassify the site into a custom category. This custom category can then be explicitly allowed for the group of users who need access and blocked for the majority, providing precise, user-group-based control.
A DNS filter blocks or allows access to a website at the DNS resolution stage, which is generally less granular for controlling access based on specific user groups for web content, making it less effective for this precise scenario.
Web filter quotas limit the amount of time or bandwidth users can spend on a site; they do not provide a mechanism to completely block access for some users while allowing it for others.
Web filter authentication would require users to authenticate, but it does not inherently block access for the majority while allowing it for some without additional policy rules that would likely leverage web filter categories or user groups anyway.
Concept tested: FortiGate web filter category overrides for user control
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339401/web-rating-overrides
Topics
Community Discussion
No community discussion yet for this question.