Configuring Firewall Policies - Fortinet FORTIOS V3.0 MR7 User Manual

Configuring a FortiGate SSL VPN
11
12
13
14
15

Configuring firewall policies

FortiOS v3.0 MR7 SSL VPN User Guide
01-30007-0348-20080718
Table 1: AV/Firewall supported product detection
Product
Norton Internet Security 2006
Trend Micro PC-cillin
McAfee
Sophos Anti-Virus
Panda Platinum 2006 Internet Security
F-Secure
Secure Resolutions
Cat Computer Services
AhnLab
Kaspersky
ZoneAlarm
Require Virtual Desktop Connection prevents a user from establishing a SSL VPN
session without using the SSL VPN Virtual Desktop application. For more
information, see the SSL VPN User Guide.
To enable the FortiGate unit to remove residual information from the remote client
computer (for example, from the web browser cache) just before the SSL VPN
session ends, select Enable Cache Clean. When this feature is enabled, if the
client's browser cannot install and run the cache cleaner, the user is not allowed to
access the SSL-VPN portal.
To allow the SSL VPN user group to use a pre-configured bookmark group,
enable Bookmarks and select the bookmark group from the drop-down list.
To have the FortiGate unit display a second HTML page in a popup window when
the web portal home page is displayed, type the URL of the web page into the
Redirect URL field.
To display a custom web portal home page caption for this group, enter the
message in the Customize portal message for this group field.
Note: This custom message overrides the portal message configured in
SSL > Config.
Select OK.
This section contains the procedures needed to configure firewall policies for web-
only mode operation and tunnel-mode operation. These procedures assume that
you have already completed the procedures outlined in
accounts and SSL VPN user groups" on page
A firewall policy specifies the originating (source) IP address of a packet and the
destination address defines the IP address of the intended recipient or network.
In general, configuring a firewall policy involves:
• specifying the IP source and destination addresses
Configuring firewall policies
AV Firewall
Y Y
Y Y
Y Y
Y N
Y Y
Y Y
Y Y
Y Y
Y Y
Y Y
Y Y
VPN >
"Configuring user
42.
43