FortiGate Administration Guide - FirewallShop.com

Switch (FortiGate-224B only)
Configuring port quarantine
Viewing client profiles
• Quarantine the switch port to which the user is connected. Allow a re-check of
the computer after installing or activating the required software. For
information about quarantine, see “Configuring dynamic policies” on page 224.
• Dynamic profile. Provide access to the network using a specified protection
profile. The FortiGate-224B unit applies antivirus scanning, IPS and content
filtering as specified in the protection profile. Optionally, you can make the
client’s port a secure port. It is then subject to firewall policies. For information
about dynamic policies, see “Viewing access policies” on page 222.
• Allow. Permit network access in spite of failed host check.
The FortiGate-224B host check uses an ActiveX control to determine the security
of the client computer. When the user connects to the port with a web browser, the
ActiveX control is downloaded and checks the client system’s AV software,
firewall software and operating system, depending on the detection settings.
Go to Switch > Port Quarantine > Client Profile to configure access control host
checks.
Figure 132:Client profile list
Configuring a client profile
Create New Create a new client profile. See “Configuring a client profile” on page 221.
Name The name of the client profile.
Detect Items The types of host check this profile includes: Antivirus (AV), Firewall, OS
check. See “Configuring a client profile” on page 221.
Delete icon Delete the profile. You cannot delete a profile that is used in a Strict or
Dynamic policy.
Edit icon Edit the profile.
Go to Switch > Port Quarantine > Client Profile and select Create New to
create a client profile or select the Edit icon of an existing profile to modify it.
Figure 133:Configuring a client profile
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 221