Blocking Google AMP on FortiGate

What is Google AMP?

Google AMP is an open-source technology utilized to create web pages that load almost instantly on mobile devices.

Issue on FortiGate

It has been observed that the web filter rules applied on FortiGate do not take effect on sites utilizing Google AMP technology on mobile devices.

Resolution Steps: To address this issue, the web filter rule needs to be modified as follows:

  1. Adjust the Feature Set option of the web filter rule to Proxy-Based mode.
  2. Configure the rule with the following settings.
  3. Add the following URLs to the list as wildcards: *.amp.dev and *.ampproject.org.

Additionally, ensure that the Inspection Mode option in the Firewall Policy rule, where the web filter is applied, is set to proxy-based mode for effective implementation.

By following these steps, it has been observed that the issue is resolved, and the web filter rules now apply to sites using Google AMP technology on mobile devices.

See also  Fortigate - Sophos IPSEC VPN Configuration Part -2

Leave a Comment