Safe Search; Data Leak Prevention Supports International Character Sets - Fortinet FortiGate Series Administration Manual

Safe search

Safe search

Data Leak Prevention supports international character sets

86
...
set content-header-list <list_name>
...
end
FortiOS Version 4.0 MR1 can prevent users from disabling the safe search feature of the
Google, Yahoo!, or Bing search engines. This is important in environments such as
education where web filtering is used to block sites with inappropriate content. If users can
bypass the search engine safe search feature, the returned search results can contain
inappropriate material in either summary text or thumbnail images.
The following procedures assume that the relevant firewall policies apply the protection
profile that you are configuring.
To enforce safe searching - web-based manager
1 Go to Firewall > Protection Profile.
2 Select the Edit icon for the protection profile that you use.
3 Expand the Web Filtering category.
4 Select the Safe Search check box for Google and Yahoo!
5 Select OK.
To enforce safe searching - CLI
config firewall profile
edit <profile_str>
set safesearch [google yahoo]
end
Data Leak Prevention (DLP) in FortiOS Version 4.0 MR1 has improved ability to detect
data leaks where international character sets are used. DLP performs text comparisons
according to its rules after converting the text to UTF-8.
Because character sets are not always accurately indicated in HTTP posts, you can
optionally specify up to five character set encodings that will be checked in addition to the
indicated character set. This feature can affect performance and it can be configured only
in the CLI.
config firewall profile
edit <profile_name>
set http-post-lang [<charset1> ... <charset5>]
end
To view the list of available character sets, enter set http-post-lang ? from within
the edit shell for the profile.
What's new in FortiOS Version 4.0 MR1
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback