To Next Page

To Previous Page

Firewall Protection Profile Configuring a protection profile

FortiGate Version 3.0 MR4 Administration Guide

01-30004-0203-20070102 275

Web filtering options

Figure 167:Protection profile web filtering options

The following options are available for web filtering through the protection profile.

See “Web Filter” on page 361 for more web filter configuration options.

Web Content Block Enable or disable web page blocking for HTTP traffic based on

the content block patterns in the content block list.

Web content block drop-down list: Select which content

block list will be used with this protection profile.

Threshold: If the combined scores of the content block

patterns appearing on a web page exceed the threshold value,

the page will be blocked. See “Viewing the web content block

list” on page 365 for details.

Web Content Exempt Enable or disable the override of web content block based on

the content exempt patterns in the content exempt list.

Web content exempt drop-down list: Select which content

exempt list will be used with this protection profile.

Web URL Filter Enable or disable web page filtering for HTTP and HTTPS

traffic based on the URL list.

Web URL filter drop-down list: Select which web URL filter

list will be used with this protection profile.

ActiveX Filter Enable blocking of ActiveX controls.

Cookie Filter Enable blocking of cookies.

Java Applet Filter Enable blocking of Java applets.

Web resume download

block

Enable to block downloading parts of a file that have already

been partially downloaded. Enabling this option will prevent the

unintentional download of virus files hidden in fragmented files.

Note that some types of files, such as PDFs, are fragmented to

increase download speed. Enabling this option can cause

download interruptions with these types of file.

Block Invalid URLs The FortiGate unit can perform validation on the CN to ensure

that it is a valid hostname before applying web-filtering. If the

CN is not a valid hostname, the traffic will be blocked if you

enable this option.

Fortinet Fortigate-5000 series User Manual

Questions and Answers: