How to bypass FortiGuard Web Filtering

Stephen Mash

By Stephen Mash . 1 March 2022

IT Specialist

Miklos Zoltan

Fact-Checked this

21 Comments

Bypass FortiGuard in five minutes:

If you want to get started right away, simply follow these instructions to bypass FortiGuard web filtering in about five minutes:

  • Click here to visit ExpressVPN and sign up
  • Get the ExpressVPN Chrome or FireFox extension
  • Open the extension and choose USA from the map
  • Go to any website previously blocked by FortiGuard
  • Enjoy full access to all web content

Important: You will have to use the ExpressVPN Chrome or FireFox extension (after you have created an account, you will be able to download the extensions from the site) to unblock FortiGuard web filter. FortiGuard will not allow you to install any VPN apps on your computer, but you can still add browser extensions.

You may have to connect to several different servers before it will unblock FortiGuard, as many VPN servers and IPs are blocked. Also, remember to install the browser extension and not the app itself, as otherwise, it will not work.

VPN method not working no matter what? – You can find a few alternative methods here.

You can find a detailed review of ExpressVPN here.

If you want to learn more about what a VPN actually does and how it works, please check out this article.

What is FortiGuard Web Filtering?

FortiGuard Web Filtering is developed by Fortinet and it a web filtering software used by schools and businesses to block access to a variety of websites, though a URL filter. It could be that school or business administrators want to filter out inappropriate, offensive, or illegal content; or prevent media streaming sites from using up too much bandwidth and slowing down the network.

FortiGuard is particularly effective because it uses both hardware and software controls to block content. It’s especially effective at preventing malware downloads from malicious or hacked websites.

Unfortunately, FortiGuard can also inadvertently block sites that provide safe and useful content.

Unblock FortiGuard

Why Does My Network Block Certain Websites?

Probably so you can stay productive. When you’re studying or working, your teacher or business manager doesn’t want you to be distracted by social media feeds, live-streamed sports, or shopping sites.

Nor do IT administrators want you to infect their systems with malware you inadvertently downloaded. Hence, it shouldn’t be too surprising for networks to use website-blocking tools like FortiGuard Web Filtering.

And networks use FortiGuard Web Filtering for good reason: to prevent virus-laden files or abusive content from infiltrating your network! But if you absolutely must bypass FortiGuard Web Filtering, you’ll be glad to know that doing so is fairly straightforward.

How Does FortiGuard Web Filtering Work?

Before getting to that, let’s discuss how a website might get blocked in the first place. There are numerous techniques, such as by including that site’s address to the blocklist of a firewall (in this case, Fortigate Firewall), or by disabling the access of a router to the website host server’s IP address.

FortiGuard Web Filtering works by using DNS web filtering — employing DNS lookups to get webpage ratings that determine whether webpages will be blocked or redirected. DNS filtering services are available to manage the process.

They block access to malicious and risky websites, prevent the downloading of malware, and stop users from accessing content that could hamper productivity or cause offence. This technique prevents the use of simple tricks like entering a site’s IP address instead of its URL to bypass a block.

Any attempt to access a blocked site that’s on a blacklist will result in the user receiving a message from FortiGuard indicating that access is blocked. Log files generated by the FortiGuard application record all access attempts.

Can I Still Access FortiGuard-Blocked Websites?

FortiGuard Web Filtering will block particular websites. If you want to unblock them (for legitimate reasons, of course), you’ve got several techniques at your disposal:

Just request that the person managing the FortiGuard Web Filtering tool grant access to the specific sites you need. Theoretically, this is the most straightforward technique; however, opening up the filtering such that dangerous websites are also made available may be impossible.

  • Use mobile data to access the website. Don’t forget that you’ll consume some of your data allowance, but this technique is the fastest and maybe the most convenient.
  • Access a copy of the website you’re looking for using an alternate domain name if such a copy exists. You’ll need to search online to find out whether an alternative domain name exists. And if it does, hope that this isn’t blocked as well. This method is a bit hit-and-miss, with no guarantee of success.
  • Open an SSH tunnel between your networked computer and a second computer that’s not on a filtered network to create a bypass path. Unfortunately, this is a very complicated and highly technical solution that works only if you have sufficient know-how and access to a suitable second computer.
  • Utilize a proxy server. This will enable you to disguise your accessing of a site that’s blocked and bypass FortiGuard. Many proxy servers are available, but keep in mind that your internet connection speed will markedly diminish. Moreover, if you use a free proxy server, be prepared to be inundated with ads and to have your internet browsing data recorded and sold to third parties.
  • Use a VPN to hide your network’s traffic. This way, you can also avoid the drawbacks of using a proxy server, which are harder to set up, slower, and less secure. A VPN will make it look like you’re not accessing a FortiGuard-blocked site. Just be sure to avoid free VPN services, because they, too, will gather data about your internet usage and sell it to third parties. You’ll want to stick to a reputable VPN provider that offers a premium service.

Please keep in mind that techniques that don’t encrypt network traffic, like SmartDNS, won’t help if you try to enter a blocked website. You’ll be stopped dead in your tracks.

How to Bypass FortiGuard Web Filtering Using a VPN

To unblock your network and access blocked websites such as Facebook and SoundCloud, just install a VPN app on your device.

You’ll get a secure, encrypted tunnel between the VPN server and your device. Then your internet traffic data will be protected as it moves through the VPN tunnel.

Your encrypted connection will prevent the FortiGuard filter from detecting the sites you browse. From the filtering tool’s perspective, all your data will be nonsense. It won’t understand the kinds of sites you visited.

One caveat: You might be breaching terms of use if you utilize a VPN to bypass FortiGuard content-filtering. This can result in certain disciplinary actions against you if you’re caught.

It can also increase the chance of your inadvertently downloading viruses if you visit a dangerous site — so be careful. Visit only reputable websites and stay safe online.

What VPN Should I Use?

To get access to FortiGuard-blocked websites, ExpressVPN is our top recommendation, for its exceptional privacy features and encryption.

How Can I Unblock a Website Using ExpressVPN?

First, download and install the VPN app. As mentioned, you’ll want to avoid anything free. Generally, they’re painfully slow and will typically sell your info to advertisers and various organizations.

Again, our recommendation would be ExpressVPN, a premium VPN product. Its high-speed servers will allow you to view YouTube HD videos, and you won’t notice any issues with buffering! Nor will you have latency problems if you want to have fun with some online games.

Related guide: How to unblock YouTube

Once the VPN app is installed, just turn it on and select the country that you prefer to connect through. For the best internet speed, it’s ideal to connect to the closest server nearby, preferably in your own country.

This is the most surefire option if the only thing you want to do is unlock your network. It will be problematic if you want to see content that your country’s ISPs restrict.

After you’ve connected to your selected server, you’re free to visit all the websites you want to see.

Related guide: How to unblock Netflix
Related guide: How to unblock Disney Plus with a VPN

Ugh, the Network Has a Block on VPNs. Now What??

FortiGuard Web Filtering may prevent access to VPN websites to stop users from downloading and installing such software. If you don’t have VPN software pre-installed and access to the ExpressVPN website is blocked, then you need a different solution.

In this case, you can install a browser add-on like the ExpressVPN Chrome or Firefox extension instead. This solution doesn’t provide the full functionality offered by the ExpressVPN app, but it will still give you excellent service with all the functions you’ll likely need.

This solution will also work if your computer is completely locked down and you can’t install applications without an admin username and password.

What If There’s a Block on VPN Traffic on the Network?

FortiGuard Web Filtering may detect and prevent encrypted traffic if it recognizes that it’s coming from a VPN. In this situation, you’ll want to utilize the “VPN obfuscation” capabilities of a Stealth VPN to make it seem like you’re not using a VPN. This is the best way to circumvent blocks to VPNs.

You might have heard about the Tor network and how it can route VPN traffic through a number of encrypted proxy layers. VPN-over-Tor is actually supported by only a relatively small number of VPN providers.

But if you availed, this technique would give you maximal unblocking power and privacy. However, setup can be complicated. Your internet speed would also become excruciatingly slow, and you’d have to say goodbye to your favourite games or video streams.

I Want to Use a VPN on My Network — But Will I Be Spotted?

Actually, using a VPN won’t mean that the network’s automatic monitoring systems will “catch” you. You just need to be mindful of anyone too close for comfort over your shoulder.

The top VPNs like ExpressVPN are equipped with advanced encryption capabilities. Moreover, a crucial point is that they’ll store encryption keys on your device locally.

So with no physical access to your device, no one can detect the websites you enter — at least not without certain advanced technologies typically accessible only to governments.

This encryption is another reason why FortiGuard Web Filtering can be bypassed by a VPN. Filters aren’t triggered because the content of data sent and received online is hidden.

Troubleshooting VPN Connection Difficulties

If you can’t install the ExpressVPN app, first try adding either the ExpressVPN Chrome extension or the ExpressVPN Firefox extension to your browser.

If that doesn’t work and FortiGuard still prevents you from accessing the website you want to visit, you’ll need to find a server that works. Just trial-and-error multiple servers until you get lucky!

It’s definitely not atypical for certain VPN IP addresses to be blocked by FortiGuard software. But you’ll find something that works eventually if you have a little patience.

Alternatively, ExpressVPN supports several different network protocols. If FortiGuard Web Filtering is blocking your VPN, then try changing protocols until you find one that works.

  • OpenVPN User Datagram Protocol (UDP): The is the default, as it delivers the best combination of speed and security.
  • OpenVPN Transmission Control Protocol (TCP): This is considered the safest VPN protocol, but it’s slower than the default UDP.
  • Layer 2 Tunneling Protocol (L2TP) / Internet Protocol Security (IPsec): This is less secure than UDP and TCP, but it’s worth trying if the other protocols don’t work.
  • Point-to-Point Tunneling Protocol (PPTP): This is very fast and offers the best network compatibility. However, it has the weakest level of encryption and so is the least secure.

Additional use cases for VPNs:

FAQ

How do you bypass FortiGuard Web Filtering?

You can bypass FortiGuard Web Filtering by either using a network or device that’s not connected to FortiGuard or using a VPN service that’s not blocked.

How does FortiGuard Web Filtering work?

FortiGuard mainstain a list of blacklisted websites and every time you try to access those sites it will prevent you from doing so, in case FortiGuard is installed and enabled on your device or network.

How do you get rid of Fortinet?

If FortiGuard is used by your school or work hardware, it’s not possible for you to disable it without administrative level controls.

You should use a different network or device instead.

How does FortiGuard web filter recognize a website worth blocking?

FortiGuard maintains a list of blacklisted websites that will get blocked if accessed.

21 Comments

  • Nightmare

    November 3, 2021 1:12 pm

    This is not a bypass. This is a ad hoc workaround.

    • Ray K.

      March 8, 2022 3:33 pm

      If you are on a network behind a Fortigate device, the only way to avoid it is a “work around” since all wires from you to the internet go through the device, you must make a connection to a device on the outside and surf from the outside. Yes there are settings that I can select to block those types of applications and vpn sites, but it is very difficult to keep up with. The easiest option now days is data on your phone! you can learn how and use your own home internet connection to provide a VPN and link to that which would probably work but that is much more time consuming and although it might cost less, it may still need tweaked or changed now and then to keep it working. you might even be able to convince the school that you need remote access to your computer at home for files etc… and if you have remote access you can browse from there.

  • Mike

    May 25, 2021 10:12 am

    My school blocked extensions, what do i do lol

    • Miklos Zoltan

      July 7, 2021 5:59 pm

      In cases like this one of the few things you can do is perhaps use your mobile connection from your phone.

  • Ray K.

    December 4, 2020 5:05 pm

    As the manager of a Fortigate filter for a school, Things are blocked because it is NOT your internet service it is OUR internet service and it is only provided to YOU for school or work purposes! I am more than happy to evaluate and open sites that meet requirements placed on me from above. Part of my trouble is regulating bandwidth to staff and students, I do not even have 1Mb per staff let alone students, so streaming is not for everyone it is school first than others if there is bandwidth available. Users usually don’t know or care about all the details, or the Child Protection mandates that schools have to work through. GO GET YOUR OWN DATA if you want what you want and don’t want to be limited!

    • JKH L.

      August 10, 2021 4:33 am

      Sorry Admin, but students and any other users have the right to protect their privacy. It may very well be a “public connection”, but you have no right to snoop nor do you have the right to force them under an unsecure and open connection. Hopefully any methods you use will be soon disclosed and defeated. More power to the students and DOWN with ridiculous and ignorant admin policy.

      • JKR

        November 6, 2021 10:27 am

        It’s the school’s network, they don’t even need to allow students to use it in the first place unless it’s related to school activities.

        If students want to use YouTube, TikTok or whatnot during class that’s on them, but don’t expect the school to provide them the internet to do it. Schools are not responsible for your entertainment.

      • Ray K.

        March 7, 2022 10:26 pm

        Your ignorance is showing! This is NOT a public connection it is a Private connection, I am not FORCING anyone to use it, I would rather them use THEIR OWN if they have it. I am required by law to filter it, I can be rarely look into what is being done, because the filter usually prevents what I don’t want to be done, and I’m throttling and prioritizing company bandwidth. You are more than welcome to have your own data plan and stop using mine!!!!! Why would you yell at me for optimizing mine for work that needs to be done?

      • Ray K.

        March 8, 2022 3:13 pm

        No where in my comment did I say it was a “public connection”? If you were attending my school, I would make you use your own data! I wouldn’t give you the wifi code 🙂

  • kye

    December 3, 2020 6:46 pm

    does this go for forticient to?

    • Ray K.

      March 8, 2022 3:24 pm

      If forticlient is installed on your machine and managed by somewhere else, It can filter you wherever you are not just behind the device that protects a school. If you have admin rights on the device because you own it, than you would be able to uninstall or prevent forticlient from turning on. If this is a school device and you do not have admin rights than it wouldn’t be right to attempt to remove the software anyway. If you are at your home with a school device and on your own internet, look into creating a VPN link to another computer in the house, this might get you around forticlient while you are home. Even though I manage a fortigate filter for a school, I think if you are home on your own internet as long as you are protecting the device from viruses, the filter shouldn’t be as intrusive, just their for protection from harmful URLs

  • Spencer

    October 15, 2020 3:31 am

    This is not helpful at all, because my school has blocked all websites that would actually benefit me

    • Mr.X

      March 8, 2022 1:52 am

      try installing it at home..

  • dunavan

    January 16, 2020 6:28 pm

    stan is right find a new way n it will make us all feel good or make a new total diffrent site

  • Stan

    May 22, 2019 9:26 am

    all the methods are blocked by fortiguard

  • Ben

    May 7, 2019 4:22 pm

    My school has blocked proxy sites and VPN’s. the only thing that works is if there is another URL that’s different but takes you to the same place.

    • Luke

      May 16, 2019 9:29 pm

      tell me plz

    • VPNTeacher

      May 17, 2019 10:33 am

      They can’t ban all proxy sites and all VPNs, it’s a cat and mouse game and it’s unlikely they will ever manage to keep track of all VPN servers.

      They also can’t really ban a “VPN” itself, as a VPN is essentially a collection of servers. They can ban some of the IP addresses of some of the servers.

      They can, however, ban people from installing third-party applications on the school computers, this also includes VPN apps.

      This is why we have recommended in the article to install a VPN browser extension, as usually, extensions can still be installed, even if the installation of standalone apps is blocked.

      You then will likely have to try out a few servers before you’ll find one that works. Most will likely not, as FortiGuard is very good at banning VPN IP addresses. Nevertheless, some will work, as most premium VPNs always add new servers and IPs. You will just have to try a few until you find one that works. There is no quick 5-second solution to this, unfortunately.

    • Ray K.

      March 8, 2022 3:18 pm

      If you configure a computer at your home that you can remote into, that would allow you to remote to your home and use your internet connection, or similar create a VPN to your home network then you browse from there. They most likely wouldn’t be able to know that connection. That does require some know how and your own paid for connection from home, so it would be much easier to just use your own data from your cell phone. I manage one of these for a school and that would be that hardest for me to block.

  • chess

    April 6, 2019 6:29 am

    Does not work with vpn

    • VPNTeacher

      April 8, 2019 12:01 pm

      Hi there. FortiGuard will sometimes detect if you have a VPN provider installed or if you are connected to a VPN server. To overcome this you will have to do the following:

      1. Install a VPN Chrome extension such as the NordVPN extension or ExpressVPN extension. As this is just a browser extension and not an app installed on the computer, FortiGuard will not block it.

      2. You may have to try out a few servers until you will find one that will not be blocked. Many VPN IP addresses will be blocked by FortiGuard but a lot will still work. You just need to keep trying until you find one that works.

      This is just how it is; some IPs will be blocked but most premium VPNs like Nord and Express will always add new IP addresses that will work.

      Hope this helps.

Leave a Repy to JKR Cancel