Web Filtering Options - Fortinet Fortigate-5000 series Administration Manual

Firewall Protection Profile

Web filtering options

FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
Figure 167:Protection profile web filtering options
The following options are available for web filtering through the protection profile.
Web Content Block Enable or disable web page blocking for HTTP traffic based on
the content block patterns in the content block list.
Web content block drop-down list: Select which content
block list will be used with this protection profile.
Threshold: If the combined scores of the content block
patterns appearing on a web page exceed the threshold value,
the page will be blocked. See
list" on page 365
Web Content Exempt Enable or disable the override of web content block based on
the content exempt patterns in the content exempt list.
Web content exempt drop-down list: Select which content
exempt list will be used with this protection profile.
Web URL Filter Enable or disable web page filtering for HTTP and HTTPS
traffic based on the URL list.
Web URL filter drop-down list: Select which web URL filter
list will be used with this protection profile.
ActiveX Filter Enable blocking of ActiveX controls.
Cookie Filter Enable blocking of cookies.
Java Applet Filter Enable blocking of Java applets.
Web resume download Enable to block downloading parts of a file that have already
been partially downloaded. Enabling this option will prevent the
block
unintentional download of virus files hidden in fragmented files.
Note that some types of files, such as PDFs, are fragmented to
increase download speed. Enabling this option can cause
download interruptions with these types of file.
Block Invalid URLs The FortiGate unit can perform validation on the CN to ensure
that it is a valid hostname before applying web-filtering. If the
CN is not a valid hostname, the traffic will be blocked if you
enable this option.
See "Web Filter" on page 361
"Viewing the web content block
for details.
for more web filter configuration options.
Configuring a protection profile
275