FortiGate Administration Guide - FirewallShop.com

Config
AntiVirus
Grayware categories are populated with known executable files. Each time the
FortiGate unit receives a virus and attack definitions update, the grayware
categories and contents are updated.
Note: If virtual domains are enabled on the FortiGate unit, antivirus features are configured
globally. To access these features, select Global Configuration on the main menu.
To view the grayware list, go to AntiVirus > Config > Grayware.
Figure 279:Sample grayware options
Enabling a grayware category blocks all files listed in the category. The categories
may change or expand when the FortiGate unit receives updates. You can choose
to enable the following grayware categories:
Adware
BHO
Dial
Download
Game
HackerTool
Hijacker
Joke
Keylog
Block adware programs. Adware is usually embedded in freeware
programs and causes ads to pop up whenever the program is
opened or used.
Block browser helper objects. BHOs are DLL files that are often
installed as part of a software package so the software can control
the behavior of Internet Explorer 4.x and later. Not all BHOs are
malicious, but the potential exists to track surfing habits and gather
other information.
Block dialer programs. Dialers allow others to use the PC modem
to call premium numbers or make long distance calls.
Block download programs. Download components are usually run
at Windows startup and are designed to install or download other
software, especially advertising and dial software.
Block games. Games are usually joke or nuisance games that you
may want to block from network users.
Block hacker tools.
Block browser hijacking programs. Browser hijacking occurs when
a ‘spyware’ type program changes web browser settings, including
favorites or bookmarks, start pages, and menu options.
Block joke programs. Joke programs can include custom cursors
and programs that appear to affect the system.
Block keylogger programs. Keylogger programs can record every
keystroke made on a keyboard including passwords, chat, and
instant messages.
FortiGate Version 3.0 MR5 Administration Guide
408 01-30005-0203-20070830