Fortinet FortiGate 4000 Betriebsanweisung

You can enable or disable groups of predefined signatures and configure the settings 
for individual predefined signatures from the predefined signature list.

 describes each possible action you can select for predefined signatures.

The signature group names.

The status of the signature group. A white check mark in a green circle 

indicates the signature group is enabled. A white X in a grey circle indicates 

the signature group is disabled. 

The logging status for individual signatures. Click on the blue triangle to 

show the signature group members. A white check mark in a green circle 

indicates logging is enabled for the signature. A white X in a grey circle 

indicates logging is disabled for the signature. 

The action set for individual signatures. Click on the blue triangle to show 

the signature group members. Action can be Pass, Drop, Reset, Reset 

Client, Reset Server, Drop Session, Clear Session, or Pass Session. See 

The revision number for individual signatures. To show the signature group 

members, click on the blue triangle.

The Configure and Reset icons. Reset only appears when the default 

settings have been modified. Selecting Reset restores the default settings.

Pass

The FortiGate unit lets the packet that triggered the signature pass 

through the firewall. If logging is disabled and action is set to Pass, the 

signature is effectively disabled.

Drop

The FortiGate unit drops the packet that triggered the signature. Fortinet 

recommends using an action other than Drop for TCP connection based 

attacks.

Reset

The FortiGate unit drops the packet that triggered the signature, sends a 

reset to both the client and the server, and removes the session from the 

FortiGate session table. Used for TCP connections only. If you set this 

action for non-TCP connection based attacks, the action will behave as 

Clear Session. If the Reset action is triggered before the TCP connection 

is fully established it acts as Clear Session.