Fortinet FortiGate 4000 Betriebsanweisung

Seite von 390
226
01-28006-0012-20041105
Fortinet Inc.
Protection profile
Firewall
Configuring IPS options
Figure 110:Protection profile IPS options
The following options are available for IPS through the protection profile. See 
 for more IPS configuration options.
Configuring content archive options
Figure 111:Protection profile content archive options
Return e-mail DNS check Enable or disable checking that the domain specified in the reply-to 
or from address has an A or MX record.
MIME headers check
Enable or disable checking source MIME headers against the 
configured spam filter MIME header list.
Banned word check
Enable or disable checking source email against the configured 
spam filter banned word list.
Spam Action
The action for the spam filter to take. Tagged allows you to append 
a custom tag to the subject or header of email identified as spam. 
For SMTP, you can choose between tagged or discard. Discard 
immediately drops the connection.
You can tag email by appending a custom word or phrase to the 
subject or inserting a MIME header and value into the email header. 
You can choose to log any spam action in the event log.
Note: Choosing to tag spam email messages automatically disables 
splice.
Append to
Choose to append the tag to the subject or MIME header of the 
email identified as spam.
Append with
Enter a word or phrase (tag) to append to email identified as spam. 
The maximum length is 63 characters.
Note: Some popular email clients cannot filter messages based on the MIME header. Check 
your email client features before deciding how to tag spam.
IPS Signature
Enable or disable signature based intrusion detection and 
prevention for all protocols.
IPS Anomaly
Enable or disable anomaly based intrusion detection and 
prevention for all protocols.