Protocol Recognition Options - Fortinet FortiGate Series Administration Manual

Firewall Protection Profile

Protocol recognition options

FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Expand Arrow
Profile Name
Comments
Protocol Recognition
Anti-Virus
IPS
Web Filtering
FortiGuard Web Filtering See
Email Filtering
Data Leak Prevention
Sensor
Application Control
Logging
You configure protocol recognition options to set the HTTPS content filtering mode and to
select the TCP port numbers that the protection profile monitors for the HTTP, HTTPS,
SMTP, POP3, IMAP, NNTP, and FTP content protocols.
If your FortiGate unit supports SSL content scanning and inspection you can also select
the TCP port numbers for SMTPS, POP3S, and IMAPS. You can also configure the
HTTPS content filtering mode. For more information, see
inspection" on page 481.
By default the protection profile monitors the default content protocol port numbers (for
example, port 80 for HTTP). You can edit the settings for each content protocol and select
inspection for all port numbers for that protocol, or select one or more port numbers to
monitor for that protocol.
Enter a name for the protection profile.
Enter a description of the profile. The maximum length is 63 characters.
See "Protocol recognition options" on page
See "Anti-Virus options" on page
See "IPS options" on page 492.
See "Web Filtering options" on page
"FortiGuard Web Filtering options" on page
See "Email Filtering options" on page
See "Data Leak Prevention Sensor options" on page
See "Application Control options" on page 502
See "Logging options" on page
Configuring a protection profile
487.
489.
493.
495.
498.
501.
503.
"SSL content scanning and
487