FortiGate Administration Guide - FirewallShop.com

Configuring IM/P2P protocols
IM, P2P & VoIP
2 Enter a name for the signature.
3 Enter the signature.
4 Select the severity and what action to perform.
5 Select OK.
To set up the policy for unknown IM users
1 Go to IM, P2P & VoIP > User > Config.
2 Select Allow or Block for each of the four IM applications.
3 Select Apply.
How to configure IM/P2P/VoIP options within a protection profile
There are several areas within a protection profile where you can configure the
IM/P2P/VoIP settings. For more detailed information, see the Firewall Profile
chapter of this guide and the IP, P2P and VoIP Technical Note.
How to configure older versions of IM/P2P applications
Some older versions of IM protocols are able to bypass file blocking because the
message types are not recognized.
Supported IM protocols include:
• MSN 6.0 and above
• ICQ 4.0 and above
• AIM 5.0 and above
• Yahoo 6.0 and above
If you want to block a protocol that is older than the ones listed above, use the CLI
command: For details see the FortiGate CLI Reference.
config imp2p old-version.
How to configure protocols that are not supported
If you find a protocol that is not supported, please ensure that the IPS package is
up to date. If the IPS package is up to date and the protocol is still not supported
you can use the custom signature.
To create a custom signature
1 Go to Intrusion Protection > Signature > Custom > Create New.
2 Enter a name for the signature.
3 Enter the signature.
4 Use the drop down boxes to select an action and the severity for the signature.
5 Select apply.
Note: To detect new IM/P2P applications or new versions of the existing
applications, you only need update the IPS package, available through the
FortiNet Distribution Network (FDN). No firmware upgrade is needed.
FortiGate Version 3.0 MR5 Administration Guide
462 01-30005-0203-20070830