IM, P2P & VoIP Overview
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 397
IM, P2P & VoIP
The IM, P2P & VoIP menu provides IM user management tools and statistics for
network IM, P2P, and VIOP usage. IM, P2P, and VoIP protocols must be enabled
in the active protection profile for the settings in this section to have any effect.
The following topics are included in this section:
• Overview
• Configuring IM/P2P protocols
• Statistics
• User
Overview
With FortiOS v3.0 MR4 firmware, you can control and monitor the usage of
IM/P2P applications and VoIP protocols.
FortiOS supports two VoIP protocols: Session Initiation Protocol (SIP) and Skinny
Client Control Protocol (SCCP).
Fortinet Inc. recognizes that IM/P2P applications are becoming part of doing
business but also, if abused, can seriously decrease productivity and network
performance.
FortiGate systems allow you to set up user lists that either allow or block the use
of applications, to determine which applications are allowed and how much
bandwidth can be used by the applications.
By combining comprehensive protection policies and easy-to-view statistical
reports, you can see which applications are being used and for what purpose,
making it easy to control IM/P2P applications and to maximize productivity.
The FortiOS 3.0 system comes with an impressive list of supported IM/P2P
protocols and can be kept up-to-date with upgrades available for download from
the Fortinet Distribution Network. There is no need to wait for firmware upgrade to
stay ahead of the latest protocols. FortiOS 3.0 also provides ways for you to deal
with unknown protocols even before upgrades are available.
Table 43 on page 398 lists the IM/P2P applications that are currently recognized
by FortiOS 3.0. The table includes the decoders, the applications associated with
the decoders and the location of the decoders in the FortiGate interface.
Note: Applications in Table 43 on page 398 marked as bold can connect to multiple P2P
networks. Turning on IM and P2P decoders and signatures will help improve IPS
performance. For example, if you want to use IPS, but you do not want to block IM or P2P
applications, you should leave IM/P2P decoders and signatures enabled. Normally, if you
turn off other signatures, the performance will be better, but for IM/P2P, it's the opposite.
To Next Page
Loading...
