Fortinet FortiGate FortiGate-100A, Руководство администратора

Страница: 226 / 388

226
01-28006-0068-20041105 Fortinet Inc.
Protection profile options Firewall
Configuring IPS options
Figure 110:Protection profile IPS options
The following options are available for IPS through the protection profile. See “IPS” on
page 291 for more IPS configuration options.
Configuring content archive options
Figure 111:Protection profile content archive options
Return e-mail DNS check Enable or disable checking that the domain specified in the reply-to
or from address has an A or MX record.
MIME headers check Enable or disable checking source MIME headers against the
configured spam filter MIME header list.
Banned word check Enable or disable checking source email against the configured
spam filter banned word list.
Spam Action The action for the spam filter to take. Tagged allows you to append
a custom tag to the subject or header of email identified as spam.
For SMTP, you can choose between tagged or discard. Discard
immediately drops the connection.
You can tag email by appending a custom word or phrase to the
subject or inserting a MIME header and value into the email header.
You can choose to log any spam action in the event log.
Note: Choosing to tag spam email messages automatically disables
splice.
Append to Choose to append the tag to the subject or MIME header of the
email identified as spam.
Append with Enter a word or phrase (tag) to append to email identified as spam.
The maximum length is 63 characters.
Note: Some popular email clients cannot filter messages based on the MIME header. Check
your email client features before deciding how to tag spam.
IPS Signature Enable or disable signature based intrusion detection and
prevention for all protocols.
IPS Anomaly Enable or disable anomaly based intrusion detection and
prevention for all protocols.