Web Filtering By Content Header - Fortinet FortiGate Series Administration Manual

What's new in FortiOS Version 4.0 MR1

Web filtering by content header

FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Variable
score <score_int>
status
{enable | disable}
FortiOS 4.0 MR1 introduces web filtering by MIME content header. You can use this
feature to broadly block content by type. But it is also useful to exempt audio and video
streaming files from antivirus scanning. Scanning these file types can be problematic.
The content header list is available in the CLI only.
Syntax
config webfilter content-header
edit <entry_number>
set name <list_name>
set comment <comment_str>
config entries
edit <regex>
set action {block | exempt}
set status {enable | disable}
end
end
C
Variable
edit <entry_number>
name <list_name>
comment
<comment_str>
config entries Variables
edit <regex>
action
{block | exempt}
status
{enable | disable}
After you have created content header lists, you need to select the content header list in
the protection profile as follows:
config firewall profile
edit <profile_name>
Description
A numerical weighting applied to the content. The score
values of all the matching words appearing on a web
page are added, and if the total is greater than the
webwordthreshold value set in the protection profile,
the page is processed according to whether the
bannedword option is set with the http command in the
protection profile. The score for banned content is
counted once even if it appears multiple times on the web
page.
Enable or disable the content entry.
Description
A unique number to identify the content header list.
The name of the content header list.
The comment attached to the content header list.
Enter a regular expression to match the content header.
For example, .*image.* matches image content
types.
Select one of:
Block — If the pattern matches, the content is blocked.
Exempt — If the pattern matches, the content is
exempted from antivirus scanning.
Enable or disable the content header entry.
Web filtering by content header
Default
10
disable
Default
block
disable
85