FortiGate Administration Guide - FirewallShop.com

Switch (FortiGate-224B only)
Configuring port quarantine
Configuring an access policy
Go to Switch > Port Quarantine > Strict Policy and select Create New to
configure an access policy for selected switch ports.
Figure 135:Configuring a strict access policy
Name
Client Profile
Action
Protection profile
Secure port
Available Ports
Member Ports
Enter a name for this policy.
Select the client profile to apply with this policy.
Select the action to take if a client fails the host check. One of:
• Allow - allow access anyway
• Deny - do not allow further access
• Quarantine - quarantine the port
• Dynamic-Profile - apply dynamic profile
If Action is Dynamic-Profile, select the protection profile to apply.
Dynamic profile applies the selected protection profile and
monitors the port. The port is quarantined if a virus or other form of
attack is detected.
Enable Secure Port on the interface automatically when the
dynamic profile is in effect. You must create firewall policies to
allow traffic to pass between this switch port and other interfaces.
A list of the switch ports that do not already have an access policy.
To add ports to the Member Ports list for this policy, select the
ports and then select the right-pointing arrow button.
A list of the switch ports that belong to this policy. To remove ports
from the list, select the ports and then select the left-pointing arrow
button.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 223