Firewall Protection Profile Configuring a protection profile
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903 497
http://docs.fortinet.com/ • Feedback
Figure 285: Protection Profile FortiGuard Web Filtering options (SSL content scanning and
inspection)
Enable FortiGuard Web
Filtering
Select to enable FortiGuard Web Filtering for this protection
profile.
Enable FortiGuard Web
Filtering Overrides
Select to enable category overrides. For more information, see
“Viewing the override list” on page 560 and “Configuring
administrative override rules” on page 561.
Provide details for blocked
HTTP 4xx and 5xx errors
Display a replacement message for 400 and 500-series HTTP
errors. If the error is allowed through, malicious or objectionable
sites can use these common error pages to circumvent web
filtering. Only supported for HTTPS if your FortiGate unit supports
SSL content scanning and inspection.
Rate images by URL (blocked
images will be replaced with
blanks)
Block images that have been rated by FortiGuard. Blocked images
are replaced on the originating web pages with blanks. Rated
image file types include GIF, JPEG, PNG, BMP, and TIFF. Only
supported for HTTPS if your FortiGate unit supports SSL content
scanning and inspection.
Allow websites when a rating
error occurs
Allow web pages that return a rating error from the web filtering
service.