How do I set up web filtering?

  • 1
  • Question
  • Updated 4 years ago
  • Answered
  • (Edited)
I have a single AP121 at home. Behind it is a FortiWifi60C. I set up a web filter on the Fortinet to block unsavory websites. All of my wired clients are blocked from sites in the FortiWiFi filter list. All of my wireless clients, that connect via the Aerohive can go to all the websites the wired clients are blocked from seeing.
I assume at this point that the Aerohive is passing traffic out my FortiWiFi, but maybe it is not and going out from the Aerohive to the internet?
How do I set up the Aerohive to block traffic to certain categories of web traffic?
How do I set up the Aerohive so the web filter on the FortiWiFi works for the wireless clients?
I disabled the WiFi on the FortiWiFi when I got the Aerohive since I prefer to use the Aerohive for wireless traffic.
Aerohive users are on 10.0.X IP addresses. Wired client on the FortiWiFi are 192.168.1.X.
The Aerohive is on the same subnet as the FortiWiFi, and uses the FortiWiFi as it's default gateway. So how I understand this is the Aerohive is passing all internet traffic through the FortiWiFi, but I don't know why the web filter is not catching traffic to blocked pages.

Thanks to everyone for your help.

Photo of Mike Jones

Mike Jones

  • 1 Post
  • 0 Reply Likes

Posted 4 years ago

  • 1
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Aerohive AP is just a layer two device that bridge your wireless client to the switch infrastructure. All traffic that already hits the switch is beyond the contor of the AP.

Your wired clients currently sit on a different network, which is 192.168.1.x, You may need to check if subnet 10.0.x.x is configured on your webfilter configuration.

The other possibility is, do you tunnel your traffic to your office through a VPN tunnel? if you do, the traffic would be tunneled and cannot be checked by the fortinet.

I would also suggest you to run debug on your Fortinet FW.

I hope this answer your question.