FortiGate Administration Guide - FirewallShop.com

Firewall Protection Profile
Configuring a protection profile
Oversized
File/Email
Add signature to
outgoing emails
Web filtering options
Select block or pass for files and email messages exceeding
configured thresholds for each protocol.
Threshold
See “AntiVirus” on page 397 for more antivirus configuration options.
Figure 214:Protection profile web filtering options
If the file is larger than the threshold value in
megabytes, the file is passed or blocked, as set in the
Oversized File/Email drop down. The maximum
threshold for scanning in memory is 10% of the
FortiGate unit RAM.
Note: For email scanning, the oversize threshold
refers to the final size of the email after encoding by
the email client, including attachments. Email clients
may use a variety of encoding types and some
encoding types translate into larger file sizes than the
original attachment. The most common encoding,
base64, translates 3 bytes of binary data into 4 bytes
of base64 data. So a file may be blocked or logged as
oversized even if the attachment is several megabytes
smaller than the configured oversize threshold.
Create and enable a signature to append to outgoing email (SMTP
only).
The following options are available for web filtering through the protection profile.
Web Content Block
Web Content Exempt
Web URL Filter
ActiveX Filter
Cookie Filter
Java Applet Filter
Enable or disable web page blocking for HTTP traffic based on
the content block patterns in the content block list.
Web content block drop-down list: Select which content
block list will be used with this protection profile.
Threshold: If the combined scores of the content block
patterns appearing on a web page exceed the threshold value,
the page will be blocked. See “Viewing the web content block
list” on page 427 for details.
Enable or disable the override of web content block based on
the content exempt patterns in the content exempt list.
Web content exempt drop-down list: Select which content
exempt list will be used with this protection profile.
Enable or disable web page filtering for HTTP and HTTPS
traffic based on the URL list.
Web URL filter drop-down list: Select which web URL filter
list will be used with this protection profile.
Enable blocking of ActiveX controls.
Enable blocking of cookies.
Enable blocking of Java applets.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 333