Fortinet fortigate-200a Betriebsanweisung

Seite von 392
14
01-28006-0092-20041105
Fortinet Inc.
About FortiGate Antivirus Firewalls
Introduction
The FortiGate-300A model meets 
enterprise-class requirements for 
performance, availability, and reliability. 
The FortiGate-300A also supports 
advanced features such as 802.1Q VLAN 
support, virtual domains, high availability (HA), and the RIP and OSPF routing 
protocols. High-availability features include automatic failover with no session loss, 
making the FortiGate-300A the choice for mission critical applications.
Antivirus protection
FortiGate ICSA-certified antivirus protection scans web (HTTP), file transfer (FTP), 
and email (SMTP, POP3, and IMAP) content as it passes through the FortiGate unit. 
FortiGate antivirus protection uses pattern matching and heuristics to find viruses. If a 
virus is found, antivirus protection removes the file containing the virus from the 
content stream and forwards a replacement message to the intended recipient.
For extra protection, you can configure antivirus protection to block specified file types 
from passing through the FortiGate unit. You can use the feature to stop files that 
might contain new viruses.
FortiGate antivirus protection can also identify and remove known grayware 
programs. Grayware programs are usually unsolicited commercial software programs 
that get installed on PCs, often without the user’s consent or knowledge. Grayware 
programs are generally considered an annoyance, but these programs can cause 
system performance problems or be used for malicious means.
If the FortiGate unit contains a hard disk, infected or blocked files and grayware files 
can be quarantined. The FortiGate administrator can download quarantined files so 
that they can be virus scanned, cleaned, and forwarded to the intended recipient. You 
can also configure the FortiGate unit to automatically delete quarantined files after a 
specified time.
The FortiGate unit can send email alerts to system administrators when it detects and 
removes a virus from a content stream. The web and email content can be in normal 
network traffic or encrypted IPSec VPN traffic.
ICSA Labs has certified that FortiGate Antivirus Firewalls:
• detect 100% of the viruses listed in the current In The Wild List (www.wildlist.org),
• detect viruses in compressed files using the PKZip format,
• detect viruses in email that has been encoded using uuencode format,
• detect viruses in email that has been encoded using MIME encoding,
• log all actions taken while scanning.
Web content filtering
FortiGate web content filtering can scan all HTTP content protocol streams for URLs, 
URL patterns, and web page content. If there is a match between a URL on the URL 
block list, or a web page contains a word or phrase that is in the content block list, the 
FortiGate unit blocks the web page. The blocked web page is replaced with a 
message that you can edit using the FortiGate web-based manager.
Esc
Enter
CONSOLE
10/100
10/100/1000
USB
1
2
3
4                               5