Firewall Protection Profile; What Is A Protection Profile - Fortinet Fortigate-5000 series Administration Manual

Firewall Protection Profile

Firewall Protection Profile

What is a protection profile

FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
This section describes how to add protection profiles to NAT/Route mode and
Transparent mode policies.
The following topics are included in this section:
• What is a protection profile
• Viewing the protection profile list
• Default protection profiles
• Configuring a protection profile
• Adding a protection profile to a policy
• Protection profile CLI configuration
A protection profile is a group of settings you can adjust to suit a particular
purpose. Since protection profiles apply different protection settings to traffic
controlled by firewall policies, you can tailor the settings to the type of traffic each
policy handles. Use protection profiles to:
• Configure antivirus protection for HTTP, FTP, IMAP, POP3, SMTP, and IM
policies.
• Configure web filtering for HTTP and HTTPS policies.
• Configure web category filtering for HTTP and HTTPS policies.
• Configure spam filtering for IMAP, POP3, and SMTP policies.
• Enable IPS for all services.
• Configure content archiving for HTTP, HTTPS, FTP, IMAP, POP3, SMTP, and
IM policies.
• Configure IM filtering and access control for AIM, ICQ, MSN, Yahoo, and
SIMPLE instant messaging.
• Configure P2P access and bandwidth control for Bit Torrent, eDonkey,
Gnutella, Kazaa, Skype, and WinNY peer to peer clients.
• Configure which protection profile actions will be logged.
• Configure rate limiting for VoIP protocols (SIP and SCCP).
Using protection profiles, you can customize types and levels of protection for
different firewall policies.
For example, while traffic between internal and external addresses might need
strict protection, traffic between trusted internal addresses might need moderate
protection. Configure policies for different traffic services to use the same or
different protection profiles.
If virtual domains are enabled on the FortiGate unit, protection profiles are
configured globally and are available to all virtual domains. To access protection
profiles, go to Global Configuration > Firewall > Protection Profile.
What is a protection profile
271