Protocol Decoders; Upgrading The Ips Protocol Decoder List - Fortinet Network Device IPS User Manual

Protocol decoders

Protocol decoders
Protocol decoders

Upgrading the IPS protocol decoder list

FortiGate IPS User Guide Version 3.0 MR7
01-30007-0080-20080916
This section describes:
• Protocol decoders
• Upgrading the IPS protocol decoder list
• Viewing the protocol decoder list
The FortiGate IPS uses protocol decoders to identify the abnormal traffic patterns
that do not meet the protocol requirements and standards. For example, the
HTTP decoder monitors the HTTP traffic to identify any HTTP packets that do not
meet the HTTP protocol standards.
On the Intrusion Protection > Signature > Protocol Decoder page, you can
view the decoders and the port numbers the protocol decoders monitor.
The Intrusion Protection system protocol decoders are upgraded automatically
through the FortiGuard Distribution Network (FDN) if existing decoders are
modified or new decoders added. The FDN keeps the protocol decoder list up-to-
date with protection against new threats such as the latest versions of existing
IM/P2P as well as against new applications.
Protocol decoders
37