FortiGate Administration Guide - FirewallShop.com

Configuring peers and peer groups
User
Table 33: AV/Firewall supported product detection
Product AV Firewall
Norton Internet Security 2006 Y Y
Trend Micro PC-cillin Y Y
McAfee Y Y
Sophos Anti-Virus Y N
Panda Platinum 2006 Internet Security Y Y
F-Secure Y Y
Secure Resolutions Y Y
Cat Computer Services Y Y
AhnLab Y Y
Kaspersky Y Y
ZoneAlarm Y Y
Configuring peers and peer groups
You can define peers and peer groups used for authentication in some VPN
configurations and for PKI certificate authentication. Use the CLI config user
peer and config user peergrp commands to do this. For more information,
see the “User” chapter of the FortiGate CLI Reference.
Authentication settings
You can define global settings for user authentication, including authentication
timeout, supported protocols, and authentication certificates.
Authentication timeout controls how long an authenticated firewall connection can
be idle before the user must authenticate again.
When user authentication is enabled on a firewall policy, the authentication
challenge is normally issued for any of the four protocols (dependent on the
connection protocol):
• HTTP (can also be set to redirect to HTTPS)
• HTTPS
• FTP
• Telnet
The selections made in the Protocol Support list of the Authentication Settings
screen control which protocols support the authentication challenge. The user
must connect with a supported protocol first so they can subsequently connect
with other protocols. If HTTPS is selected as a method of protocol support, it
allows the user to authenticate with a customized Local certificate.
FortiGate Version 3.0 MR5 Administration Guide
394 01-30005-0203-20070830