Factory Default Protection Profiles - Fortinet FortiGate FortiGate-200 Installation Manual

Getting started

Factory default protection profiles

FortiGate-200 Installation Guide
Table 4: Default firewall configuration
Configuration setting Name
Firewall address
Pre-defined service
Recurring schedule
Protection Profiles
The factory default firewall configuration is the same in NAT/Route and Transparent
mode.
Use protection profiles to apply different protection settings for traffic that is controlled
by firewall policies. You can use protection profiles to:
• Configure antivirus protection for HTTP, FTP, IMAP, POP3, and SMTP firewall
policies
• Configure Web filtering for HTTP firewall policies
• Configure Web category filtering for HTTP firewall policies
• Configure spam filtering for IMAP, POP3, and SMTP firewall policies
• Enable the Intrusion Protection System (IPS) for all services
• Enable content logging for HTTP, FTP, IMAP, POP3, and SMTP firewall policies
Using protection profiles, you can build protection configurations that can be applied
to different types of firewall policies. This allows you to customize types and levels of
protection for different firewall policies.
For example, while traffic between internal and external addresses might need strict
protection, traffic between trusted internal addresses might need moderate protection.
You can configure firewall policies for different traffic services to use the same or
different protection profiles.
Protection profiles can be added to NAT/Route mode and Transparent mode firewall
policies.
01-28004-0020-20040830
Factory default FortiGate configuration settings
Description
All Firewall address matches the source or
destination address of any packet.
More than 50 Select from any of the 50 pre-defined services
predefined services to control traffic through the FortiGate unit that
uses that service.
Always The recurring schedule is valid at any time.
Strict, Scan, Web, Control how the FortiGate unit applies virus
Unfiltered scanning, web content filtering, spam filtering,
and IPS.
19