FortiGate Administration Guide - FirewallShop.com

Configuring a protection profile
Firewall Protection Profile
Web resume download
block
Block Invalid URLs
See “Web Filter” on page 423 for more web filter configuration options.
FortiGuard Web Filtering options
Enable to block downloading parts of a file that have already
been partially downloaded. Enabling this option will prevent the
unintentional download of virus files hidden in fragmented files.
Note that some types of files, such as PDFs, are fragmented to
increase download speed. Enabling this option can cause
download interruptions with these types of file.
The FortiGate unit can perform validation on the CN to ensure
that it is a valid hostname before applying web-filtering. If the
CN is not a valid hostname, the traffic will be blocked if you
enable this option.
Figure 215:Protection profile FortiGuard Web Filtering options
The following options are available for web category filtering through the
protection profile.
Enable FortiGuard Web
Filtering
Enable FortiGuard Web
Filtering Overrides
Provide details for
blocked HTTP 4xx and
5xx errors (HTTP only)
Enable FortiGuard Web Filtering category blocking.
Enable category overrides. When selected, a list of groups is
displayed. If no groups are available, the option is grayed out.
For more information about overrides, see “Viewing the
override list” on page 436 and “Configuring override rules” on
page 437. For more information about groups, see “User
groups” on page 386.
Display a replacement message for 400 and 500-series HTTP
errors. If the error is allowed through, malicious or objectionable
sites can use these common error pages to circumvent web
category blocking.
FortiGate Version 3.0 MR5 Administration Guide
334 01-30005-0203-20070830