Fortinet FortiGate FortiGate-1000, Руководство администратора

Страница: 226 / 392

226
01-28006-0009-20041105 Fortinet Inc.
Protection profile Firewall
Configuring web filtering options
Figure 107:Protection profile web filtering options
The following options are available for web filtering through the protection profile. See
“Web filter” on page 323 for more web filter configuration options.
Pass fragmented emails Enable or disable passing fragmented email for mail protocols
(IMAP, POP3, SMTP). Fragmented email cannot be scanned for
viruses.
Oversized file/email Select block or pass for files and email that exceed configured
thresholds for each protocol. The maximum threshold for scanning
in memory is 10% of the FortiGate unit RAM.
Add signature to
outgoing emails Create and enable a signature to append to outgoing email (SMTP
only).
Web Content Block Enable or disable web page blocking for HTTP traffic based on the
banned words and patterns in the content block list.
Web URL Block Enable or disable web page filtering for HTTP traffic based on the
URL block list.
Web Exempt List Enable or disable web page filtering for HTTP traffic based on the
URL exempt list. Exempt URLs are not scanned for viruses.
Web Script Filter Enable or disable blocking scripts from web pages for HTTP traffic.
Web resume download
block Enable to block downloading parts of a file that have already been
partially downloaded. Enabling this option will prevent the
unintentional download of virus files hidden in fragmented files.
Note that some types of files, such as PDF, fragment files to
increase download speed and enabling this option can cause
download interruptions.