Fortinet’s web filter can be configured to allow access to CyberLearn’s training and phishing landing domains. We recommend whitelisting via FortiGate’s Web Filter if users experience issues accessing CyberLearn content (e.g., links failing to load).
The steps below follow Fortinet’s Static URL Filter approach. If you run into issues whitelisting via URL, consider Fortinet’s Web rating override method, or contact your CyberLearn representative for assistance.
Whitelisting by Static URL Filter
You can allow access to CyberLearn training and phishing pages by adding the domains below to your Static URL Filter list in your FortiGate firewall. The Web Filter will then always allow pages matching these URLs.
Note: Whitelisting with Web rating overrides is another supported method in FortiGate, useful for organizations using FortiGuard categories. See Fortinet docs for details on web rating overrides.
Domains to allow (enter without http:// or https://):
go.cyber-detector.com(click/open tracking for simulations)app-cyberlearn.com(training portal)api.app-cyberlearn.com(API calls)- *.veriffy-center.com
- *.user-messagee.com
- *.access-portall.com
- *.delivery-statuss.com
- *.document-serviice.com
*.cyber-detector.com
Steps
- In your CyberLearn admin/console, identify the domains in use for your tenant (see list above).
- Log in to your FortiGate.
- Navigate to Security Profiles → Web Filter.
- Create a new Web Filter profile or select an existing one.
- Expand Static URL Filter, enable URL Filter, and select Create.
- Enter each CyberLearn domain from Step 1 (without protocol).
- Type: Simple
- Action: Allow
- Confirm the status is Enabled.
After completing these steps, we recommend sending a quick CyberLearn test campaign (or opening a known training URL) to verify that pages load as expected from a client behind FortiGate. If your organization uses additional URL-rewriting or scanning layers (e.g., email security gateways), add corresponding exceptions there as well.
Tip: To ensure your allow-list is effective, verify by opening a CyberLearn simulation link and checking that the landing page loads immediately and that the click is recorded in CyberLearn analytics.
