Fortinet Fortigate-5000 series - Page 10

FortiGate Version 3.0 MR4 Administration Guide
10 01-30004-0203-20070102
Contents
Configuring a protection profile................................................................... 272
Antivirus options........................................................................................ 273
Web filtering options ................................................................................. 275
FortiGuard-Web filtering options............................................................... 276
Spam filtering options ............................................................................... 277
IPS options................................................................................................ 279
Content archive options ............................................................................ 279
IM and P2P options................................................................................... 280
Logging options......................................................................................... 281
VoIP options.............................................................................................. 282
Adding a protection profile to a policy........................................................ 282
Protection profile CLI configuration............................................................ 283
VPN IPSEC ..................................................................................... 285
Overview of IPSec interface mode............................................................... 285
Auto Key......................................................................................................... 287
Creating a new phase 1 configuration ..................................................... 287
Defining phase 1 advanced settings......................................................... 290
Creating a new phase 2 configuration ..................................................... 292
Defining phase 2 advanced settings......................................................... 293
Internet browsing configuration................................................................. 295
Manual Key .................................................................................................... 296
Creating a new manual key configuration ................................................ 297
Concentrator ................................................................................................. 299
Defining concentrator options ................................................................... 299
Monitor .......................................................................................................... 300
VPN PPTP ....................................................................................... 303
PPTP Range ................................................................................................... 303
VPN SSL.......................................................................................... 305
Config ............................................................................................................ 305
Monitor ........................................................................................................... 307
VPN Certificates............................................................................. 309
Local Certificates .......................................................................................... 309
Generating a certificate request................................................................ 310
Downloading and submitting a certificate request .................................... 312
Importing a signed server certificate ......................................................... 313
Importing an exported server certificate and private key .......................... 313
Importing separate server certificate and private key files........................ 314
Remote Certificates....................................................................................... 314
Importing Remote (OCSP) certificates...................................................... 315