23.12.2015 Views

FortiOS Handbook - What's New

fortigate-whats-new-54

fortigate-whats-new-54

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

External Security Devices<br />

FortiMail<br />

2. Go to Policy & Objects > IPv4 Policy, add or edit a firewall policy and select Web Cache.<br />

Or enter the following CLI command to add web caching to a firewall policy:<br />

config firewall policy<br />

edit 0<br />

...<br />

set webcache enable<br />

...<br />

end<br />

When you add web caching to a firewall policy, web traffic accepted by the policy is offloaded to the FortiCache<br />

device for processing.<br />

Enabling FortiCache on the External Security Devices page adds the following configuration to the CLI:<br />

config system wccp<br />

set service-id 51<br />

set router-id 5.5.5.5 (the IP address of the FortiGate interface that communicates with<br />

the FortiCache)<br />

set group address 0.0.0.0<br />

set server-list 5.5.5.45 255.255.255.255 (the IP address of the FortiCache)<br />

set authentication disable<br />

set forward-method GRE<br />

set return-method GRE<br />

set assignment-method HASH<br />

end<br />

FortiMail<br />

To be able to offload Anti-Spam processing to a FortiMail device you should:<br />

1. Go to System > Feature Select and turn on Anti-Spam Filter.<br />

2. Go to System > External Security Devices, enable SMTP Service - FortiMail and add the IP address of your<br />

FortiMail device.<br />

3. Go to Security Profiles > Anti-Spam and edit an Anti-Spam profile and set Inspection Device to External.<br />

4. Go to Policy & Objects > IPv4 Policy, add or edit a Firewall policy, enable Anti-Spam and select the profile for<br />

which you set Inspection Device to External.<br />

Whats <strong>New</strong> for <strong>FortiOS</strong> 5.4.0<br />

Fortinet Technologies Inc.<br />

40

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!