Application Control Options - Fortinet FortiGate Series Administration Manual

Configuring a protection profile

Application Control options

502
You can also use protection profile DLP settings to:
• display DLP archive meta-information on the Log and Archive Statistics system
dashboard widget
• archive spam email (requires a FortiAnalyzer unit or the FortiGuard Analysis and
Management Service).
To configure DLP sensor options, go to Firewall > Protection Profile. Select Create New to
add a protection profile, or the Edit icon beside an existing protection profile. Then select
the Expand Arrow beside Data Leak Prevention Sensor. Select a DLP sensor, enter the
information as described below, and select OK.
For information about DLP, see
For information about character sets and DLP scanning, see
content filtering, Email filtering banned word, and DLP scanning" on page
Figure 288: Data Leak Prevention Sensor options
Figure 289: Data Leak Prevention Sensor options (SSL content scanning inspection and
FortiAnalyzer unit configured)
Data Leak Select the check box and then specify the DLP sensor to add to the protection
profile. For more information, see
Prevention
page 584.
Sensor
Display DLP For each protocol, select whether or not to display DLP archiving data in the
dashboard Log and Archive Statistics widget. You can select HTTP, HTTPS,
meta-
FTP, IMAP, POP3, and SMTP.
information on
If your FortiGate unit supports SSL content scanning and inspection you can also
the system
select IMAPS, POP3S, and SMTPS.
dashboard
For more information about the Log and Archive Statistics widget, see
Archive Statistics" on page
Archive For each email protocol, select to archive email messages identified as spam by
FortiGate Email filtering or by FortiGuard Antispam. You must configure the
SPAMed emails
FortiGate unit to log to a FortiAnalyzer unit or enable the FortiGuard Analysis and
to
Management Service. For more information, see
FortiAnalyzer/
message archiving" on page
FortiGuard
You can apply application control options through a protection profile.
For more information about application control, see
To configure application control options, go to Firewall > Protection Profile. Select Create
New to add a protection profile, or the Edit icon beside an existing protection profile. Then
select the Expand Arrow beside Application Control and select the application control
black/white list to add to the protection profile.
"Data Leak Prevention" on page
"Adding and configuring a DLP sensor" on
117.
593.
"Application Control" on page
FortiGate Version 4.0 MR1 Administration Guide
Firewall Protection Profile
583.
"Character sets and Web
495.
"Log and
"Configuring spam email
603.
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback