Fortinet Gate 60D, Administration Manual

Page: 206 / 706

Operation mode and VDOM management access System Config
FortiGate Version 4.0 Administration Guide
206 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
Operation mode and VDOM management access
You can change the operation mode of each VDOM independently of other VDOMs. This
allows any combination of NAT/Route and Transparent operating modes on the FortiGate
unit VDOMs.
Management access to a VDOM can be restricted based on which interfaces and
protocols can be used to connect to the FortiGate unit.
Changing operation mode
You can set the operating mode for your VDOM and perform sufficient network
configuration to ensure that you can connect to the web-based manager in the new mode.
To switch from NAT/Route to Transparent mode
1 Go to System > Config > Operation Mode or select Change beside Operation Mode on
the System Status page for the virtual domain.
%%NIDSEVENT%%
The IPS attack message.
%%NIDSEVENT%%
is added to alert email
intrusion messages.
%%OVERRIDE%%
The link to the FortiGuard Web Filtering override form. This is visible
only if the user belongs to a group that is permitted to create FortiGuard
web filtering overrides.
%%OVRD_FORM%%
The FortiGuard web filter block override form. This tag must be present
in the FortiGuard Web Filtering override form and should not be used in
other replacement messages.
%%PROTOCOL%%
The protocol (http, ftp, pop3, imap, or smtp) in which a virus was
detected.
%%PROTOCOL%%
is added to alert email virus messages.
%%QUARFILENAME%%
The name of a file that has been removed from a content stream and
added to the quarantine. This could be a file that contained a virus or
was blocked by antivirus file blocking.
%%QUARFILENAME%%
can be
used in virus and file block messages. Quarantining is only available on
FortiGate units with a local disk.
%%QUESTION%%
Authentication challenge question on auth-challenge page.
Prompt to enter username and password on auth-login page.
%%SERVICE%%
The name of the web filtering service.
%%SOURCE_IP%%
The IP address of the request originator who would have received the
blocked file. For email this is the IP address of the user’s computer that
attempted to download the message from which the file was removed.
%%TIMEOUT%%
Configured number of seconds between authentication keepalive
connections. Used on the auth-keepalive page.
%%URL%%
The URL of a web page. This can be a web page that is blocked by web
filter content or URL blocking.
%%URL%%
can also be used in http virus
and file block messages to be the URL of the web page from which a
user attempted to download a file that is blocked.
%%VIRUS%%
The name of a virus that was found in a file by the antivirus system.
%%VIRUS%%
can be used in virus messages
Table 38: Replacement message tags (Continued)
Tag Description