Fortinet FortiGate 4000 Betriebsanweisung

Seite von 390
Introduction 
About FortiGate Antivirus Firewalls
FortiGate-4000 Administration Guide
01-28006-0012-20041105
 15
Web content filtering
FortiGate web content filtering can scan all HTTP content protocol streams for URLs, 
URL patterns, and web page content. If there is a match between a URL on the URL 
block list, or a web page contains a word or phrase that is in the content block list, the 
FortiGate unit blocks the web page. The blocked web page is replaced with a 
message that you can edit using the FortiGate web-based manager.
FortiGate web content filtering also supports FortiGuard web category blocking. Using 
web category blocking you can restrict or allow access to web pages based on 
content ratings of web pages.
You can configure URL blocking to block all or some of the pages on a web site. Using 
this feature, you can deny access to parts of a web site without denying access to it 
completely.
To prevent unintentionally blocking legitimate web pages, you can add URLs to an 
exempt list that overrides the URL blocking and content blocking lists. The exempt list 
also exempts web traffic this address from virus scanning.
Web content filtering also includes a script filter feature that can block unsecure web 
content such as Java applets, cookies, and ActiveX.
Spam filtering
FortiGate spam filtering can scan all POP3, SMTP, and IMAP email content for spam. 
You can configure spam filtering to filter mail according to IP address, email address, 
mime headers, and content. Mail messages can be identified as spam or clear. 
You can also add the names of known Real-time Blackhole List (RBL) and Open 
Relay Database List (ORDBL) servers. These services contain lists of known spam 
sources.
If an email message is found to be spam, the FortiGate adds an email tag to the 
subject line of the email. The recipient can use the mail client software to filter 
messages based on the email tag. Spam filtering can also be configured to delete 
SMTP email messages identified as spam.
Firewall
The FortiGate ICSA-certified firewall protects your computer networks from Internet 
threats. ICSA has granted FortiGate firewalls version 4.0 firewall certification, 
providing assurance that FortiGate firewalls successfully screen and secure corporate 
networks against a range of threats from public or other untrusted networks.
After basic installation of the FortiGate unit, the firewall allows users on the protected 
network to access the Internet while blocking Internet access to internal networks. You 
can configure the firewall to put controls on access to the Internet from the protected 
networks and to allow controlled access to internal networks.