Antivirus Protection - Fortinet FortiGate FortiGate-500A Administration Manual

About FortiGate Antivirus Firewalls

Antivirus protection

14
The FortiGate-500A model provides the
carrier-class levels of performance and
reliability demanded by large enterprises
and service providers. With a total of 10
network connections (including a 4-port
LAN switch), and high-availability features, including automatic failover with no
session loss, the FortiGate-500A is the choice for mission critical applications. The
flexibility, reliability, and easy management of the FortiGate-500A makes it a natural
choice for managed service offerings. The FortiGate-500A also supports advanced
features such as 802.1Q VLAN support, virtual domains, and the RIP and OSPF
routing protocols.
FortiGate ICSA-certified antivirus protection scans web (HTTP), file transfer (FTP),
and email (SMTP, POP3, and IMAP) content as it passes through the FortiGate unit.
FortiGate antivirus protection uses pattern matching and heuristics to find viruses. If a
virus is found, antivirus protection removes the file containing the virus from the
content stream and forwards a replacement message to the intended recipient.
For extra protection, you can configure antivirus protection to block specified file types
from passing through the FortiGate unit. You can use the feature to stop files that
might contain new viruses.
FortiGate antivirus protection can also identify and remove known grayware
programs. Grayware programs are usually unsolicited commercial software programs
that get installed on PCs, often without the user's consent or knowledge. Grayware
programs are generally considered an annoyance, but these programs can cause
system performance problems or be used for malicious means.
If the FortiGate unit contains a hard disk, infected or blocked files and grayware files
can be quarantined. The FortiGate administrator can download quarantined files so
that they can be virus scanned, cleaned, and forwarded to the intended recipient. You
can also configure the FortiGate unit to automatically delete quarantined files after a
specified time.
The FortiGate unit can send email alerts to system administrators when it detects and
removes a virus from a content stream. The web and email content can be in normal
network traffic or encrypted IPSec VPN traffic.
ICSA Labs has certified that FortiGate Antivirus Firewalls:
• detect 100% of the viruses listed in the current In The Wild List (www.wildlist.org),
• detect viruses in compressed files using the PKZip format,
• detect viruses in email that has been encoded using uuencode format,
• detect viruses in email that has been encoded using MIME encoding,
• log all actions taken while scanning.
01-28006-0100-20041105
CONSOLE USB LAN
Esc Enter
L1 L2 L3 L4 1
A
Introduction
10/100 10/100/1000
2 3 4 5 6
Fortinet Inc.