FortiGate Administration Guide - FirewallShop.com

Default protection profiles
Firewall Protection Profile
Default protection profiles
The FortiGate unit is preconfigured with four default protection profiles. In many
cases you can use these default protection profiles as is instead of adding new
protection profiles.
Strict
Scan
Web
Unfiltered
Apply maximum protection to HTTP, FTP, IMAP, POP3, and SMTP
traffic. The strict protection profile may not be useful under normal
circumstances but it is available when maximum protection is required.
Apply virus scanning to HTTP, FTP, IMAP, POP3, and SMTP traffic.
Quarantine is also selected for all content services. On FortiGate
models with a hard drive, if antivirus scanning finds a virus in a file, the
file is quarantined on the FortiGate hard disk. If required, system
administrators can recover quarantined files.
Apply virus scanning and web content blocking to HTTP traffic. Add this
protection profile to firewall policies that control HTTP traffic.
Apply no scanning, blocking or IPS. Use the unfiltered content profile if
no content protection for content traffic is required. Add this protection
profile to firewall policies for connections between highly trusted or
highly secure networks where content does not need to be protected.
Viewing the protection profile list
To view the protection profile list, go to Firewall > Protection Profile.
Figure 211:Default protection profiles
The Protection Profile list has the following icons and features:
Create New
Name
Delete
Edit
Select to add a protection profile.
The name of the protection profile
Select to remove a protection profile from the list. The Delete icon is
only available if the profile is not being used in a firewall policy.
Select to modify a protection profile.
Note: A protection profile cannot be deleted (the Delete icon is not visible) if it is selected in
a firewall policy or included in a user group.
FortiGate Version 3.0 MR5 Administration Guide
330 01-30005-0203-20070830