This article explains that the change in the GUI web filter profile does not save randomly especially if the category number is the same as the existing entry’s entry ID.
For example, the following filter entries in the web filter profile:
edit 4 set category 9 set action block
The category 4 is in the ‘Allow’ action and entry 4 for Category 9. At this moment, if the update category ‘Illegal or Unethical’ (category id 4) action is from Allow to Block in GUI after selecting ‘OK’, the change can not be committed to the system.
Scope
FortiGate v7.2.
Solution
Workaround:
Use CLI or delete the web filter, clone another, rename as the old name and do the changes. The issue will be resolved in v7.2.9 and v7.6.0 and it fixed in v7.4.4.