FortiGate Administration Guide - FirewallShop.com

Firewall policy examples
Firewall Policy
Options to check FortiClient on hosts
On the FortiGate model 1000A, 3600A, and 5005FA2, firewall policies can deny
access for hosts that do not have FortiClient Host Security software installed and
operating. This feature can detect FortiClient software version 3.0 MR2 or later.
Figure 171:FortiClient Host Security check options
Check FortiClient Installed
and Running
Redirect Restricted Users to
FortiGate Download Portal
Select to check that the source host is running FortiClient
Host Security software. Enable the following reasons to
deny access as needed:
• FortiClient is Not Installed
• FortiClient is Not Licensed
• AV/IPS Database Out-of-Date
• AV Disabled
• Firewall Disabled
• Web Filter Disabled
Select to redirect denied users to the internal web portal
which provides the reason for denial. On units that
support it, users can download FortiClient Host Security
software.
Firewall policy examples
FortiGate units are fully capable of meeting various network requirements from
home use to SOHO, to large enterprises and ISPs. The following two scenarios
will demonstrate the practical applications of firewall policies in the SOHO and
large enterprise environments.
For more detail on these two examples please see the Example Library Network
and SOHO and SMB Network Protection example guides in the FortiOS v3.0 MR2
documentation.
• Scenario one: SOHO sized business
• Scenario two: enterprise sized business
Scenario one: SOHO sized business
Company A is a small software company performing development and providing
customer support. In addition to their internal network of 15 computers, they also
have several employees that work from home all or some of the time.
FortiGate Version 3.0 MR5 Administration Guide
282 01-30005-0203-20070830