system : replacemsg fortiguard-wf
 
replacemsg fortiguard-wf
Use this command to change the default messages that replace a web pages that FortiGuard web filtering has blocked.
The FortiGate unit sends the FortiGuard Web Filtering replacement messages listed in Table 8 to web browsers using the HTTP protocol when FortiGuard web filtering blocks a URL, provides details about blocked HTTP 4xx and 5xx errors, and for FortiGuard overrides. FortiGuard Web Filtering replacement messages are HTTP pages.
If the FortiGate unit supports SSL content scanning and inspection these replacement messages can also replace web pages downloaded using the HTTPS protocol.
By default, these are HTML messages.
Syntax
config system replacemsg fortiguard-wf <fortiguard_msg_type>
set buffer <message>
set format <format>
set header <header_type>
end
Variable
Description
Default
<fortiguard_msg_type>
FortiGuard replacement message type. See Table 8.
No default.
buffer <message>
Type a new replacement message to replace the current replacement message. Maximum length 8 192 characters.
Depends on message type.
format <format>
Set the format of the message:
html
text
none
No default
header <header_type>
Set the format of the message header:
8bit
http
none
Depends on message type.
Table 8: FortiGuard Web Filtering replacement messages
Message name
Description
ftgd-block
Enable FortiGuard Web Filtering is enabled in a web filter profile for HTTP or HTTPS, and blocks a web page. The blocked page is replaced with the ftgd‑block web page.
ftgd-ovrd
Override selected filtering for a FortiGuard Web Filtering category and FortiGuard Web Filtering blocks a web page in this category. displays this web page. Using this web page users can authenticate to get access to the page. Go to UTM > Web Filter > Override to add override rules. For more information, see webfilter override.
The %%OVRD_FORM%% tag provides the form used to initiate an override if FortiGuard Web Filtering blocks access to a web page. Do not remove this tag from the replacement message.
http-err
Provide details for blocked HTTP 4xx and 5xx errors is enabled in a web filter profile for HTTP or HTTPS, and blocks a web page. The blocked page is replaced with the http-err web page.