Fortinet FortiGate Series Administration Manual page 15

Contents
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
IP pools ........................................................................................................................ 463
IP pools and dynamic NAT ..................................................................................... 464
IP Pools for firewall policies that use fixed ports..................................................... 464
Source IP address and IP pool address matching.................................................. 464
Viewing the IP pool list ............................................................................................... 465
Configuring IP Pools................................................................................................... 465
Double NAT: combining IP pool with virtual IP........................................................ 466
Adding NAT firewall policies in transparent mode .................................................. 468
Firewall Load Balance ......................................................................... 471
How load balancer works ........................................................................................... 471
Configuring virtual servers ........................................................................................ 472
Configuring real servers............................................................................................. 475
Configuring health check monitors........................................................................... 476
Monitoring the servers ............................................................................................... 478
Firewall Protection Profile................................................................... 479
What is a protection profile?...................................................................................... 479
Adding a protection profile to a firewall policy ........................................................ 480
Default protection profiles ......................................................................................... 480
Viewing the protection profile list ............................................................................. 481
SSL content scanning and inspection ...................................................................... 481
Supported FortiGate models................................................................................... 482
Setting up certificates to avoid client warnings ....................................................... 482
Configuring SSL content scanning and inspection ................................................. 484
Configuring a protection profile ................................................................................ 486
Protocol recognition options ................................................................................... 487
Anti-Virus options.................................................................................................... 489
IPS options ............................................................................................................. 492
Web Filtering options .............................................................................................. 493
FortiGuard Web Filtering options............................................................................ 495
Email Filtering options ............................................................................................ 498
Data Leak Prevention Sensor options .................................................................... 501
Application Control options ..................................................................................... 502
Logging options ...................................................................................................... 503
SIP support ........................................................................................... 505
VoIP and SIP ................................................................................................................ 505
The FortiGate unit and VoIP security ........................................................................ 507
SIP NAT.................................................................................................................. 507
How SIP support works .............................................................................................. 509
15