FortiGate Administration Guide - FirewallShop.com

Intrusion Protection
Custom signatures
To disable a signature
1 Go to Intrusion Protection > Signatures > Predefined.
2 Clear the Enable box for the signatures you want to disable.
To turn off logging for a signature
1 Go to Intrusion Protection > Signatures > Predefined.
2 Select the Configure icon on the right hand side of the signature you want to
change.
3 Clear the Logging check box.
Custom signatures
Custom signatures provide the power and flexibility to customize the FortiGate
IPS for diverse network environments. The FortiGate predefined signatures cover
common attacks. If an unusual or specialized application or an uncommon
platform is being used, add custom signatures based on the security alerts
released by the application and platform vendors.
You can also create custom signatures to help you block P2P protocols.
For more details about custom signatures, see the FortiGate Intrusion Protection
System (IPS) Guide.
Note: If virtual domains are enabled on the FortiGate unit, the IPS is configured globally. To
access the IPS, select Global Configuration on the main menu.
Viewing the custom signature list
To view the custom signature list, go to Intrusion Protection > Signature >
Custom.
Figure 282:The custom signature list
Clear all custom signatures
Reset to recommended settings
View custom
signatures with
severity
Select filters then select Go to view only those custom signatures that
match the filter criteria. Sort criteria can be = to All, Information,
Low, Medium, High, or Critical.
Create New Select to create a new custom signature.
Clear all custom Remove all the custom signatures.
signatures icon
Reset to Reset all the custom signatures to the recommended settings.
recommended
settings icon
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 417