Fortinet FortiGate 100A, Руководство администратора

Страница: 223 / 374

Firewall Default protection profiles
FortiGate-100A Administration Guide 01-28007-0068-20041203
223
Default protection profiles
The FortiGate unit comes preconfigured with four protection profiles.
Protection profile options
Figure 105:Adding a protection profile
You can configure the following options when creating or editing a protection profile.
Strict To apply maximum protection to HTTP, FTP, IMAP, POP3, and SMTP traffic.
You may not wish to use the strict protection profile under normal
circumstances but it is available if you have extreme problems with viruses
and require maximum screening.
Web To apply virus scanning and web content blocking to HTTP traffic. You can
add this protection profile to firewall policies that control HTTP traffic.
Unfiltered To apply no scanning, blocking or IPS. Use the unfiltered content profile if
you do not want to apply content protection to content traffic. You can add
this protection profile to firewall policies for connections between highly
trusted or highly secure networks where content does not need to be
protected.
Profile Name Enter a name for the profile. (New profiles only.)
Anti-Virus See “Configuring antivirus options” on page 224 .
Web Filtering See “Configuring web filtering options” on page 225 .
Web Category Filtering See “Configuring web category filtering options” on page 225 .
Spam Filtering See “Configuring spam filtering options” on page 226 .
IPS See “Configuring IPS options” on page 227 .
Content Archive See “Configuring content archive options” on page 227 .