The exhibit displays a FortiSASE block page, which explicitly states the reason for denial: "You have tried to access a web page which is in a category that is blocked." It identifies the specific blocked category as "Potentially Liable." The FortiSASE feature that classifies websites into categories (such as "Potentially Liable") and enforces block/allow actions based on them is the FortiGuard category-based filter. To permit access, the administrator must modify this specific filter within the applied Web Filter security profile to change the action for this category from "Block" to "Allow" or "Monitor".

B. content filter: This is a generic industry term. The specific Fortinet feature is the "Web Filter" profile, and the precise component causing the block is the "FortiGuard category-based filter," making option A more accurate.

C. URL Filter: This feature blocks or allows specific, manually entered URLs. While it could create an override, it doesn't address the root cause of the block, which is the category-based policy.

D. inline cloud access security broker (CASB) headers: CASB is for controlling access to specific cloud applications (SaaS), not for general web category filtering as shown in the block page.

1. FortiSASE Administration Guide (23.3): In the section Security > Web Filter

the guide details the configuration of Web Filter profiles. It explicitly shows the "FortiGuard Category Based Filter" as the component where administrators set actions (Allow

Block

Monitor

etc.) for web categories. This directly corresponds to the reason for the block shown in the exhibit.

2. FortiSASE Administration Guide (23.3): The Security > Web Filter section also describes the "Static URL Filter

" confirming it is a separate function from category-based filtering

used for creating explicit allow/block lists for specific URLs. This differentiates option A from C.

3. FortiSASE Administration Guide (23.3): The Security > CASB section details the configuration for Cloud Access Security Broker functionality

which focuses on SaaS application control

demonstrating it is a distinct feature from the general Web Filter. This invalidates option D.