FortiGate Administration Guide - FirewallShop.com

IM, P2P & VoIP
Configuring IM/P2P protocols
Table 43: IM/P2P applications covered by FortiOS 3.0
IPS
Gnutella (Firewall > Protection Profile > IM/P2P)
KaZaA (Firewall > Protection Profile > IM/P2P)
Skype (Firewall > Protection Profile > IM/P2P)
WinNY (Firewall > Protection Profile > IM/P2P)
ares (Intrusion Protection > Signatures > Protocol
decoder > p2p_decoder)
direct_connect (Intrusion Protection > Signatures >
Protocol decoder > p2p_decoder)
BearShare
Shareaza
LimeWire
Xolox
Swapper
iMesh
MLdonkey
Gnucleus
Morpheus
Openext
Mutella
Qtella
Qcquisition
Acquisition
NapShare
gtk-gnutella
KaZaA
Skype
WinNY
Ares Galaxy
DC++
Applications
Configuring IM/P2P protocols
Different organizations require different policies regarding IM/P2P. The FortiGate
unit allows you to configure your unit in the way that best serves your needs.
How to enable and disable IM/P2P options
This section will tell you the four main locations to enable or disable the IM/P2P
options. This section includes how to enable predefined signatures, custom
signatures and unknown user policies.
To enable predefined IM/P2P signatures in intrusion protection
1 Go to Intrusion Protection > Signatures > Predefined.
2 Use the signature group filter to search for the IM and P2P signatures.
3 Enable the signature by selecting the Enable box.
4 Enable logging for a signature by selecting the Logging box.
5 In the row that corresponds to the signature you want to edit, select the Edit icon.
6 Set the action and severity.
7 Select OK.
To create custom IM/P2P signatures for unknown protocols
1 Go to Intrusion Protection > Signature > Custom > Create New.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 461