Fortinet Gate 60D, Administration Manual

Page: 405 / 706

Firewall Protection Profile Configuring a protection profile
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
405
http://docs.fortinet.com/ • Feedback
Protocol recognition options
You configure protocol recognition options to set the HTTPS content filtering mode and to
select the TCP port numbers that the protection profile monitors for the HTTP, HTTPS,
SMTP, POP3, IMAP, NNTP, and FTP content protocols.
If your FortiGate unit supports SSL content scanning and inspection you can also select
the TCP port numbers for SMTPS, POP3S, and IMAPS. You can also configure the
HTTPS content filtering mode. For more information, see
“SSL content scanning and
inspection” on page 399 .
By default the protection profile monitors the default content protocol port numbers (for
example, port 80 for HTTP). You can edit the settings for each content protocol and select
inspection for all port numbers for that protocol, or select one or more port numbers to
monitor for that protocol.
Profile Name Enter a name for the protection profile.
Comments Enter a description of the profile. The maximum length is 63 characters.
Protocol Recognition See “Protocol recognition options” on page 405 .
Anti-Virus See “Anti-Virus options” on page 407 .
IPS See “IPS options” on page 411 .
Web Filtering See “Web Filtering options” on page 411 .
FortiGuard Web Filtering See “FortiGuard Web Filtering options” on page 413 .
Spam Filtering See “Spam Filtering options” on page 416 .
Data Leak Prevention
Sensor See “Data Leak Prevention Sensor options” on page 419 .
Application Control See “Application Control options” on page 420
Logging See “Logging options” on page 421 .
Expand Arrow