Logging Options - Fortinet Fortigate-5000 series Administration Manual

Firewall Protection Profile

Logging options

FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
Block Login
Block File Transfers
Block Audio
Inspect Non-standard Port
Action
Limit (KBytes/s)
Changes to IM protection profile options, while IM users are logged in, will take
effect only upon their next login. Enabling Block Login, for example, cannot be
used to disconnect currently logged in users.
See "IM, P2P & VoIP" on page 397
Figure 173:Protection profile logging options
The following options are available for logging through the protection profile:
Antivirus Viruses
Blocked Files
Oversized Files/Emails Enable logging of oversized files and email
Enable to prevent instant message users from logging in to
AIM, ICQ, MSN, Yahoo, and SIMPLE services.
Enable to block file transfers for AIM, ICQ, MSN, and Yahoo
protocols.
Enable to block audio for AIM, ICQ, MSN, and Yahoo
protocols.
Enable inspection of non-standard ports for IM traffic.
Pass, block, or rate limit P2P transfers for BitTorrent,
eDonkey, Gnutella, Kazaa, and WinNY protocols. Skype
transfers can be passed or blocked, but not rate limited.
Specify bandwidth limit for BitTorrent, eDonkey, Gnutella,
Kazaa, and WinNY protocols if action is set to rate limit.
for more IM configuration options.
Enable logging of scanned viruses.
Enable logging of blocked files.
messages.
Configuring a protection profile
281