FortiGate Administration Guide - FirewallShop.com

Switch (FortiGate-224B only)
Configuring dynamic policies
Figure 137:Creating a dynamic policy
Name
IPS Min. Alert
Antivirus
Available Ports
Member Ports
Portal...
Enable FortiClient
Image Download
Allow to access
third-party URLs
Allowed URLs
Name
URL
Delete icon
Add button
Host check and
Auto-Recover
Client Profile
Enter a name for this dynamic policy.
Select the minimum IPS alert level that will trigger quarantine, or
None if IPS protection is not required.
Select to trigger quarantine if there is an antivirus alert.
A list of the switch ports that do not already have a dynamic policy.
To add a port to the Member Ports list, select it and then select the
right-pointing arrow button.
A list of the switch ports that belong to this policy.
To remove a port from the list, select it and then select the leftpointing
arrow button.
Select to view the Quarantine Portal settings listed below.
Select to show a “Download FortiClient” link on the web portal
page. You must go to System > Maintenance >
Backup & Restore to upload a FortiClient image file.
Specify a list of URLs to which the Quarantined port is permitted
to connect.
Add links for external URLs to the web portal page.
Enter the text for the link.
Enter the URL for the link.
Select to remove link.
Select to add link to list.
Select to show a “Check my computer” link on the web portal
page. The user selects this link to re-run the host check specified
in the Client Profile.
Select the access client profile to apply with this policy.
See “Configuring a client profile” on page 221.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 225