Fortinet FortiGate 100, Administration Manual

Page: 223 / 388

Firewall Protection profile options
FortiGate-100 Administration Guide 01-28006-0003-20041105
223
Configuring antivirus options
Figure 106:Protection profile antivirus options
The following options are available for antivirus through the protection profile. See
“Antivirus” on page 303 for more antivirus configuration options.
Configuring web filtering options
Figure 107:Protection profile web filtering options
The following options are available for web filtering through the protection profile. See
“Web filter” on page 321 for more web filter configuration options.
Virus Scan Enable or disable virus scanning (for viruses and worms) for each
protocol (HTTP, FTP, IMAP, POP3, SMTP). Grayware, if enabled in
Antivirus > Config > Config, is included with the Virus Scan.
Heuristic, if enabled in the CLI, is also included with the Virus Scan.
File Block Enable or disable file pattern blocking for each protocol. You can
block files by name, by extension, or any other pattern, giving you
the flexibility to block files that may contain harmful content.
Quarantine (models with
local disk only) Enable or disable quarantining for each protocol. You can
quarantine suspect files to view them or submit files to Fortinet for
analysis.
Pass fragmented emails Enable or disable passing fragmented email for mail protocols
(IMAP, POP3, SMTP). Fragmented email cannot be scanned for
viruses.
Oversized file/email Select block or pass for files and email that exceed configured
thresholds for each protocol. The maximum threshold for scanning
in memory is 10% of the FortiGate unit RAM.
Add signature to
outgoing emails Create and enable a signature to append to outgoing email (SMTP
only).
Web Content Block Enable or disable web page blocking for HTTP traffic based on the
banned words and patterns in the content block list.