FortiGate Administration Guide - FirewallShop.com

Configuring port quarantine
Switch (FortiGate-224B only)
Viewing access policies
Name
Enter a name for the detection rule.
Enable any of the following as needed:
FortiClient AV Check Check that FortiClient Host Security is installed and running.
FortiClient Firewall Check Check that the FortiClient Host Security firewall is enabled.
Enable OS Check
Check for operating system version. Select acceptable
operating systems. For Windows XP and Windows 2000 you
can select the minimum acceptable service pack.
Third-Party AV Check
Third-Party Firewall Check
Go to Switch > Port Quarantine > Strict Policy to view, modify or create new
access policies for switch ports. These policies perform host checking according
to the selected profile and apply the selected action if the client fails the host
check.
Dynamic profile applies an existing protection profile to the user and monitors the
port. The port is quarantined if a virus or other form of attack is detected.
Figure 134:Viewing and editing access policies
Check that one of the following products is installed:
• Norton Internet Security 2006
• Trend Micro PC-cillin
• Mcafee
• Sophos anti-virus (antivirus only)
• Panda Platinum 2006 Internet Security
• F-Secure
• Secure Resolution (antivirus only)
• Cat Computer Services
• AHN LAB
• Kaspersky
• ZoneAlarm
Name
Client Profile
Action
Ports
The name of this strict policy.
The client profile (a set of host checks) that applies to this strict policy.
Action if the client fails access host check.
• Allow - access allowed anyway
• Deny - no further access allowed
• Quarantine - port is quarantined
• Dynamic-Profile - user traffic to other VLANs is scanned according to
the protection profile selected in the access policy
The ports to which this strict policy applies.
FortiGate Version 3.0 MR5 Administration Guide
222 01-30005-0203-20070830