FortiGate Administration Guide - FirewallShop.com

Adding a protection profile to a policy
Firewall Protection Profile
Adding a protection profile to a policy
Enable protection profiles for firewall policies with action set to allow or IPSec and
with service set to ANY, HTTP, FTP, IMAP, POP3, SMTP, or a service group that
includes these services.
If virtual domains are enabled on the FortiGate unit, protection profiles must be
added to policies in each virtual domain. To access the policy, select a virtual
domain from the main menu.
1 Go to Firewall > Policy.
2 Select a policy list to which to add a protection profile.
For example, to enable network protection for files downloaded from the web by
internal network users, select an internal to external policy list.
3 Select Create New to add a policy, or select Edit for the policy to modify.
4 Select protection profile.
5 Select a protection profile from the list.
6 Configure the remaining policy settings, if required.
7 Select OK.
8 Repeat this procedure for any policies for which to enable network protection.
Protection profile CLI configuration
Use the config firewall profile CLI command to add, edit or delete
protection profiles. Use protection profiles to apply different protection settings for
traffic controlled by firewall policies.
Note: For complete descriptions and examples of how to use CLI commands, see the
FortiGate CLI Reference.
FortiGate Version 3.0 MR5 Administration Guide
342 01-30005-0203-20070830