Fortinet Fortiwifi fortiwifi-60, Administration Manual

Page: 229 / 394

Firewall Protection profile
FortiWiFi-60 Administration Guide 01-28006-0014-20041105
229
You can configure the following options when creating or editing a protection profile.
Configuring antivirus options
Figure 110:Protection profile antivirus options
The following options are available for antivirus through the protection profile. See
“Antivirus” on page 309 for more antivirus configuration options.
Profile Name Enter a name for the profile. (New profiles only.)
Anti-Virus See “Configuring antivirus options” on page 229 .
Web Filtering See “Configuring web filtering options” on page 230 .
Web Category Filtering See “Configuring web category filtering options” on page 230 .
Spam Filtering See “Configuring spam filtering options” on page 231 .
IPS See “Configuring IPS options” on page 232 .
Content Archive See “Configuring content archive options” on page 232 .
Virus Scan Enable or disable virus scanning (for viruses and worms) for each
protocol (HTTP, FTP, IMAP, POP3, SMTP). Grayware, if enabled in
Antivirus > Config > Config, is included with the Virus Scan.
Heuristic, if enabled in the CLI, is also included with the Virus Scan.
File Block Enable or disable file pattern blocking for each protocol. You can
block files by name, by extension, or any other pattern, giving you
the flexibility to block files that may contain harmful content.
Quarantine (models with
local disk only) Enable or disable quarantining for each protocol. You can
quarantine suspect files to view them or submit files to Fortinet for
analysis.
Pass fragmented emails Enable or disable passing fragmented email for mail protocols
(IMAP, POP3, SMTP). Fragmented email cannot be scanned for
viruses.
Oversized file/email Select block or pass for files and email that exceed configured
thresholds for each protocol. The maximum threshold for scanning
in memory is 10% of the FortiWiFi unit RAM.
Add signature to
outgoing emails Create and enable a signature to append to outgoing email (SMTP
only).