Configuring Protection Profiles - Fortinet FortiGate FortiGate-5001 Administration Manual

Firewall

Configuring protection profiles

FortiGate-5000 series Administration Guide
To add a protection profile
If the default protection profiles do not provide the settings you require, you can create
custom protection profiles.
1 Go to Firewall > Protection Profile.
2 Select Create New.
3 Enter a name for the profile.
4 Configure the protection profile options.
5 Select OK.
Note: If both Virus Scan and File Block are enabled, the FortiGate unit blocks files that match
enabled file patterns before they are scanned for viruses.
To delete a protection profile
1 Go to Firewall > Protection Profile.
2 Select the Delete icon beside the protection profile you want to delete.
3 Select OK.
To edit a protection profile
1 Go to Firewall > Protection Profile.
2 Select the Edit icon beside the protection profile you want to modify.
3 Modify the profile as required.
Note: To change the one-time schedule name you must delete the schedule and add it with a
new name.
4 Select OK.
To add a protection profile to a policy
You can enable protection profiles for firewall policies with action set to allow or
encrypt and with service set to ANY, HTTP, FTP, IMAP, POP3, SMTP, or a service
group that includes these services.
1 Go to Firewall > Policy.
2 Select a policy list to which you want to add a protection profile.
For example, to enable network protection for files downloaded from the web by
internal network users, select an internal to external policy list.
3 Select Create New to add a policy or select Edit for the policy you want to modify.
4 Select protection profile.
5 Select a protection profile from the list.
6 Configure the remaining policy settings, if required.
7 Select OK.
01-28008-0013-20050204
Protection profile
239