Web Filtering - Fortinet FortiGate Series Install Manual

Advanced configuration

Web filtering

FortiGate Version 4.0 Desktop Install Guide
01-400-95522-20090501
http://docs.fortinet.com/ • Feedback
White lists and black lists enable you to maintain a list of email addresses that you want
(white list) or don't want (black list) to receive email from. You can add or remove
addresses from lists as required. The Fortinet unit uses both an IP address list and an
email address list to filter incoming email, if enabled in the protection profile.
When performing an IP address list check, the Fortinet unit compares the IP address of
the message's sender to the IP address list in sequence. If a match is found, the action
associated with the IP address is taken. If no match is found, the message is passed to
the next enabled spam filter.
When performing an email list check, the Fortinet unit compares the email address of the
message's sender to the email address list in sequence. If a match is found, the action
associated with the email address is taken. If no match is found, the message is passed to
the next enabled antispam filter.
To configure black/white lists, go to UTM > AntiSpam > E-mail Address.
You enable antispam options for each mail service (POP3, IMAP and SMTP) in the
protection profile. To configure antispam protection profile settings, go to Firewall >
Protection Profile. Select edit for a profile and select the Spam Filtering options.
For details on the antispam features and settings, see the
or the Fortinet Online Help.
Web filtering is a method of controlling what web sites are viewable by users. There are
three main sections to web filtering: the Web Filter Content Block, the URL Filter, and the
FortiGuard Web filter. Each interact with each other in such a way as to provide maximum
control and protection for the Internet users.
Web filtering options are enabled and configured in the protection profile settings by going
to Firewall > Protection Profile. Select edit for a profile and selecting either the FortiGuard
Web Filtering options or the Web Filtering options. You need to register your Fortinet unit
and purchase FortiGuard services to use FortiGuard Web Filtering.
Content blocking enables you to specify file types and words that the Fortinet unit should
block when encountered. With web content block enabled, every requested web page is
checked against the content block list. The score value of each pattern appearing on the
page is added, and if the total is greater than the threshold value set in the protection
profile, the page is blocked.
To configure content blocking, go to UTM > Web Filter > Content Block.
URL filter enables you to control additional web sites that you can block or allow. This
enables you greater control over certain URLs or sub-URLs. The Fortinet unit allows or
blocks web pages matching any specified URLs or patterns and displays a replacement
message instead.
To configure URL filters, go to UTM > Web Filter > URL Filter.
FortiGuard web filtering is a managed web filtering solution provided by Fortinet.
FortiGuard web filtering sorts hundreds of millions of web pages into a wide range of
categories users can allow, block, or monitor. FortiGuard web filtering includes over 60
million individual ratings of web sites applying to hundreds of millions of pages. Pages are
sorted and rated into 56 categories users can allow, block, or monitor. Categories may be
added to, or updated, as the Internet evolves. You need to have a FortiGuard subscription
to take advantage of FortiGuard web filtering.
For details and configuration options for the web filtering features and settings, see the
FortiGate Administration Guide or the Fortinet Online Help.
Web filtering
FortiGate Administration Guide
33