Software and Systems Assurance Specialist
Based in West Sussex, England, Stephen has worked as an information security and safety assurance consultant since 1997, specialising in risk management for high integrity systems. Prior to that, he developed safety-critical software-based systems for the aerospace industry. He transitioned from consultancy into the role of technical copywriter and editor in 2019, writing and reviewing materials on behalf of a broad spectrum of clients.
Disclosure: PrivacyAffairs.com is reader supported. Learn how we make money.
How to bypass FortiGuard Web Filtering
Bypass FortiGuard in five minutes:
If you want to get started right away, simply follow these instructions to bypass FortiGuard web filtering in about five minutes:
- Click here to visit ExpressVPN and sign up
- Get the ExpressVPN Chrome or FireFox extension
- Open the extension and choose USA from the map
- Go to any website previously blocked by FortiGuard
- Enjoy full access to all web content
Important: You will have to use the ExpressVPN Chrome or FireFox extension (after you have created an account, you will be able to download the extensions from the site) to unblock FortiGuard web filter. FortiGuard will not allow you to install any VPN apps on your computer, but you can still add browser extensions.
You may have to connect to several different servers before it will unblock FortiGuard, as many VPN servers and IPs are blocked. Also, remember to install the browser extension and not the app itself, as otherwise, it will not work.
VPN method not working no matter what? – You can find a few alternative methods here.
You can find a detailed review of ExpressVPN here.
If you want to learn more about what a VPN actually does and how it works, please check out this article.
What is FortiGuard Web Filtering?
FortiGuard Web Filtering is developed by Fortinet and it a web filtering software used by schools and businesses to block access to a variety of websites, though a URL filter. It could be that school or business administrators want to filter out inappropriate, offensive, or illegal content; or prevent media streaming sites from using up too much bandwidth and slowing down the network.
FortiGuard is particularly effective because it uses both hardware and software controls to block content. It’s especially effective at preventing malware downloads from malicious or hacked websites.
Unfortunately, FortiGuard can also inadvertently block sites that provide safe and useful content.
Why Does My Network Block Certain Websites?
Probably so you can stay productive. When you’re studying or working, your teacher or business manager doesn’t want you to be distracted by social media feeds, live-streamed sports, or shopping sites. Nor do IT administrators want you to infect their systems with malware you inadvertently downloaded. Hence, it shouldn’t be too surprising for networks to use website-blocking tools like FortiGuard Web Filtering.
And networks use FortiGuard Web Filtering for good reason: to prevent virus-laden files or abusive content from infiltrating your network! But if you absolutely must bypass FortiGuard Web Filtering, you’ll be glad to know that doing so is fairly straightforward.
How Does FortiGuard Web Filtering Work?
Before getting to that, let’s discuss how a website might get blocked in the first place. There are numerous techniques, such as by including that site’s address to the blocklist of a firewall (in this case, Fortigate Firewall), or by disabling the access of a router to the website host server’s IP address.
FortiGuard Web Filtering works by using DNS web filtering — employing DNS lookups to get webpage ratings that determine whether webpages will be blocked or redirected. DNS filtering services are available to manage the process. They block access to malicious and risky websites, prevent the downloading of malware, and stop users from accessing content that could hamper productivity or cause offence. This technique prevents the use of simple tricks like entering a site’s IP address instead of its URL to bypass a block.
Any attempt to access a blocked site that’s on a blacklist will result in the user receiving a message from FortiGuard indicating that access is blocked. Log files generated by the FortiGuard application record all access attempts.
Can I Still Access FortiGuard-Blocked Websites?
FortiGuard Web Filtering will block particular websites. If you want to unblock them (for legitimate reasons, of course), you’ve got several techniques at your disposal:
Just request that the person managing the FortiGuard Web Filtering tool grant access to the specific sites you need. Theoretically, this is the most straightforward technique; however, opening up the filtering such that dangerous websites are also made available may be impossible.
- Use mobile data to access the website. Don’t forget that you’ll consume some of your data allowance, but this technique is the fastest and maybe the most convenient.
- Access a copy of the website you’re looking for using an alternate domain name if such a copy exists. You’ll need to search online to find out whether an alternative domain name exists. And if it does, hope that this isn’t blocked as well. This method is a bit hit-and-miss, with no guarantee of success.
- Open an SSH tunnel between your networked computer and a second computer that’s not on a filtered network to create a bypass path. Unfortunately, this is a very complicated and highly technical solution that works only if you have sufficient know-how and access to a suitable second computer.
- Utilize a proxy server. This will enable you to disguise your accessing of a site that’s blocked and bypass FortiGuard. Many proxy servers are available, but keep in mind that your internet connection speed will markedly diminish. Moreover, if you use a free proxy server, be prepared to be inundated with ads and to have your internet browsing data recorded and sold to third parties.
- Use a VPN to hide your network’s traffic. This way, you can also avoid the drawbacks of using a proxy server, which are harder to set up, slower, and less secure. A VPN will make it look like you’re not accessing a FortiGuard-blocked site. Just be sure to avoid free VPN services, because they, too, will gather data about your internet usage and sell it to third parties. You’ll want to stick to a reputable VPN provider that offers a premium service.
Please keep in mind that techniques that don’t encrypt network traffic, like SmartDNS, won’t help if you try to enter a blocked website. You’ll be stopped dead in your tracks.
How to Bypass FortiGuard Web Filtering Using a VPN
To unblock your network and access blocked websites such as Facebook and SoundCloud, just install a VPN app on your device.
You’ll get a secure, encrypted tunnel between the VPN server and your device. Then your internet traffic data will be protected as it moves through the VPN tunnel.
Your encrypted connection will prevent the FortiGuard filter from detecting the sites you browse. From the filtering tool’s perspective, all your data will be nonsense. It won’t understand the kinds of sites you visited.
One caveat: You might be breaching terms of use if you utilize a VPN to bypass FortiGuard content-filtering. This can result in certain disciplinary actions against you if you’re caught. It can also increase the chance of your inadvertently downloading viruses if you visit a dangerous site — so be careful. Visit only reputable websites and stay safe online.
What VPN Should I Use?
To get access to FortiGuard-blocked websites, ExpressVPN is our top recommendation, for its exceptional privacy features and encryption. Please check out our beginner’s guide to VPNs if you want to find out more about ExpressVPN and how it works.
How Can I Unblock a Website Using ExpressVPN?
First, download and install the VPN app. As mentioned, you’ll want to avoid anything free. Generally, they’re painfully slow and will typically sell your info to advertisers and various organizations.
Again, our recommendation would be ExpressVPN, a premium product. Its high-speed servers will allow you to view YouTube HD videos, and you won’t notice any issues with buffering! Nor will you have latency problems if you want to have fun with some online games.
Once the VPN app is installed, just turn it on and select the country that you prefer to connect through. For the best internet speed, it’s ideal to connect to the closest server nearby, preferably in your own country. This is the most surefire option if the only thing you want to do is unlock your network. It will be problematic if you want to see content that your country’s ISPs restrict.
After you’ve connected to your selected server, you’re free to visit all the websites you want to see.
Ugh, the Network Has a Block on VPNs. Now What??
FortiGuard Web Filtering may prevent access to VPN websites to stop users from downloading and installing such software. If you don’t have VPN software pre-installed and access to the ExpressVPN website is blocked, then you need a different solution.
In this case, you can install a browser addon like the ExpressVPN Chrome or Firefox extension instead. This solution doesn’t provide the full functionality offered by the ExpressVPN app, but it will still give you excellent service with all the functions you’ll likely need.
This solution will also work if your computer is completely locked down and you can’t install applications without an admin username and password.
What If There’s a Block on VPN Traffic on the Network?
FortiGuard Web Filtering may detect and prevent encrypted traffic if it recognizes that it’s coming from a VPN. In this situation, you’ll want to utilize the “VPN obfuscation” capabilities of a Stealth VPN to make it seem like you’re not using a VPN. This is the best way to circumvent blocks to VPNs.
You might have heard about the Tor network and how it can route VPN traffic through a number of encrypted proxy layers. VPN-over-Tor is actually supported by only a relatively small number of VPN providers.
But if you availed, this technique would give you maximal unblocking power and privacy. However, setup can be complicated. Your internet speed would also become excruciatingly slow, and you’d have to say goodbye to your favourite games or video streams.
I Want to Use a VPN on My Network — But Will I Be Spotted?
Actually, using a VPN won’t mean that the network’s automatic monitoring systems will “catch” you. You just need to be mindful of anyone too close for comfort over your shoulder.
The top VPNs like ExpressVPN are equipped with advanced encryption capabilities. Moreover, a crucial point is that they’ll store encryption keys on your device locally. So with no physical access to your device, no one can detect the websites you enter — at least not without certain advanced technologies typically accessible only to governments.
This encryption is another reason why FortiGuard Web Filtering can be bypassed by a VPN. Filters aren’t triggered because the content of data sent and received online is hidden.
Troubleshooting VPN Connection Difficulties
If you can’t install the ExpressVPN app, first try adding either the ExpressVPN Chrome extension or the ExpressVPN Firefox extension to your browser.
If that doesn’t work and FortiGuard still prevents you from accessing the website you want to visit, you’ll need to find a server that works. Just trial-and-error multiple servers until you get lucky! It’s definitely not atypical for certain VPN IP addresses to be blocked by FortiGuard software. But you’ll find something that works eventually if you have a little patience.
Alternatively, ExpressVPN supports several different network protocols. If FortiGuard Web Filtering is blocking your VPN, then try changing protocols until you find one that works.
- OpenVPN User Datagram Protocol (UDP): The is the default, as it delivers the best combination of speed and security.
- OpenVPN Transmission Control Protocol (TCP): This is considered the safest VPN protocol, but it’s slower than the default UDP.
- Layer 2 Tunneling Protocol (L2TP) / Internet Protocol Security (IPsec): This is less secure than UDP and TCP, but it’s worth trying if the other protocols don’t work.
- Point-to-Point Tunneling Protocol (PPTP): This is very fast and offers the best network compatibility. However, it has the weakest level of encryption and so is the least secure.
Further VPN guides we recommend you to check out:
- How to hide your VPN usage
- How to prevent your real IP from leaking
- How to encrypt your internet traffic
- VPN protocols
- What is a double VPN
- What is a VPN kill switch
- How does port forwarding work with a VPN
- Can you use a VPN with Tails?
Additional use cases for VPNs:
FAQ
How do you bypass FortiGuard Web Filtering?
You can bypass FortiGuard Web Filtering by either using a network or device that’s not connected to FortiGuard or using a VPN service that’s not blocked.
How does FortiGuard Web Filtering work?
FortiGuard mainstain a list of blacklisted websites and every time you try to access those sites it will prevent you from doing so, in case FortiGuard is installed and enabled on your device or network.
How do you get rid of Fortinet?
If FortiGuard is used by your school or work hardware, it’s not possible for you to disable it without administrative level controls.
You should use a different network or device instead.
How does FortiGuard web filter recognize a website worth blocking?
FortiGuard maintains a list of blacklisted websites that will get blocked if accessed.
Does not work with vpn
Hi there. FortiGuard will sometimes detect if you have a VPN provider installed or if you are connected to a VPN server. To overcome this you will have to do the following:
1. Install a VPN Chrome extension such as the NordVPN extension or ExpressVPN extension. As this is just a browser extension and not an app installed on the computer, FortiGuard will not block it.
2. You may have to try out a few servers until you will find one that will not be blocked. Many VPN IP addresses will be blocked by FortiGuard but a lot will still work. You just need to keep trying until you find one that works.
This is just how it is; some IPs will be blocked but most premium VPNs like Nord and Express will always add new IP addresses that will work.
Hope this helps.
My school has blocked proxy sites and VPN’s. the only thing that works is if there is another URL that’s different but takes you to the same place.
tell me plz
They can’t ban all proxy sites and all VPNs, it’s a cat and mouse game and it’s unlikely they will ever manage to keep track of all VPN servers.
They also can’t really ban a “VPN” itself, as a VPN is essentially a collection of servers. They can ban some of the IP addresses of some of the servers.
They can, however, ban people from installing third-party applications on the school computers, this also includes VPN apps.
This is why we have recommended in the article to install a VPN browser extension, as usually, extensions can still be installed, even if the installation of standalone apps is blocked.
You then will likely have to try out a few servers before you’ll find one that works. Most will likely not, as FortiGuard is very good at banning VPN IP addresses. Nevertheless, some will work, as most premium VPNs always add new servers and IPs. You will just have to try a few until you find one that works. There is no quick 5-second solution to this, unfortunately.
all the methods are blocked by fortiguard
stan is right find a new way n it will make us all feel good or make a new total diffrent site
This is not helpful at all, because my school has blocked all websites that would actually benefit me
does this go for forticient to?
As the manager of a Fortigate filter for a school, Things are blocked because it is NOT your internet service it is OUR internet service and it is only provided to YOU for school or work purposes! I am more than happy to evaluate and open sites that meet requirements placed on me from above. Part of my trouble is regulating bandwidth to staff and students, I do not even have 1Mb per staff let alone students, so streaming is not for everyone it is school first than others if there is bandwidth available. Users usually don’t know or care about all the details, or the Child Protection mandates that schools have to work through. GO GET YOUR OWN DATA if you want what you want and don’t want to be limited!
My school blocked extensions, what do i do lol