Fortinet 60B manual AntiSpam options

Page 34

AntiSpam options

Advanced configuration

Grayware - These are unsolicited commercial software programs that are installed on computers, often without the user's consent or knowledge. Grayware programs are generally considered an annoyance, but these programs can cause system performance problems or be used for malicious ends. The FortiGate unit scans for known grayware executable programs in each enabled category.

Heuristics - The FortiGate heuristic antivirus engine performs tests on the file to detect virus-like behavior or known virus indicators. In this way, heuristic scanning may detect new viruses, but may also produce some false positive results.

The antivirus elements work in sequence to give you an efficient method of scanning incoming files. The first three elements have specific functions, the fourth, the heuristics, is to cover any new previously unknown virus threats. The four elements work together to offer your network unparalleled antivirus protection. To ensure that your system is providing the most protection available, all virus definitions and signatures are up dated regularly through the FortiGuard antivirus services.

To configure the file patterns that the FortiGate scans, go to AntiVirus > File Filter.

To enable grayware blocking, go to AntiVirus > Config > Grayware.

Antivirus settings are turned on in the protection profile. In the protection profile you can enable antivirus options for specific services and which services will use the file patterns as a part of the antivirus process.

To configure antivirus protection profile settings, go to Firewall > Protection Profile. Select edit for a profile and select the Anti-Virus options.

For details on the antivirus features and settings, see the FortiGate Administration Guide or the FortiGate Online Help.

AntiSpam options

The FortiGate unit’s antispam feature detects unsolicited commercial email by identifying spam email messages and spam transmissions from known or suspected spam servers.

This feature requires a FortiGuard subscription and a registered FortiGate unit. When the FortiGate unit receives an email message, it verifies with the FortiGuard server whether it is a valid email or a spam message. FortiGuard Antispam is one of the features designed to manage spam. FortiGuard is an antispam system from Fortinet that includes an IP address black list, a URL black list, and spam filtering tools. The FortiGuard Center accepts submission of spam email messages as well as well as reports of false positives.

Depending on how you configure the FortiGate unit, the FortiGate unit will either tag the message with text so you can easily identify the spam, or delete the message before it reaches the recipient.

The FortiGate unit also enables you to create your own spam filters using banned words and black/white lists.

 

FortiGate-60B FortiOS 3.0 MR6 Install Guide

34

01-30006-0446-20080910

Image 34
Contents Install G U I D E Trademarks Regulatory complianceContents Configuring Transparent mode Advanced configurationConfiguring the modem interface Protection profilesFortiGate Firmware IndexPage Introduction Register your FortiGate unitAbout this document About the FortiGate-60BDocument conventions Further Reading Typographic conventionsFortinet Knowledge Center Customer service and technical supportComments on Fortinet technical documentation Installing Environmental specificationsGrounding Rack mount instructionsTurning off the FortiGate unit Connecting to the networkPlugging in the FortiGate MountingTurning off the FortiGate unit NAT vs. Transparent mode NAT modeConnecting to the web-based manager Connecting to the FortiGate unitTransparent mode To connect to the web-based managerConnecting to the CLI To connect to the CLIConfigure the interfaces Configuring NAT modeUsing the web-based manager To configure interfaces Go to System Network InterfaceConfigure a DNS server Adding a default route and gatewayTo modify the default gateway Go to Router Static Adding firewall policiesTo set an interface to use a static address Using the CLITo set an interface to use Dhcp addressing To configure DNS server settings To set an interface to use PPPoE addressingTo modify the default gateway Configuring Transparent modeTo add an outgoing traffic firewall policy Switching to Transparent mode To switch to Transparent mode Go to System StatusTo switch to Transparent mode To configure DNS server settings Verify the configuration Backing up the configurationSet the Administrator password Restoring a configurationAdditional configuration Set the time and dateConfigure FortiGuard Updating antivirus and IPS signaturesAdditional configuration Advanced configuration Protection profilesFirewall policies Firewall policiesConfiguring firewall policies Antivirus optionsAntiSpam options Web filtering Logging Selecting a modem mode Redundant modeConfiguring modem settings Stand alone modeTo configure modem settings Go to System Network Modem Dial on demandConfiguring the modem using the CLI SyntaxKeywords and variables Description Default Mode redudant Example Phone-numberAdding a Ping Server Dead gateway detectionTo configure the modem Go to System Network Modem Administrative access through the modem portConfiguring the Pcmcia modem card Adding firewall policies for modem connectionsAt+cpin=5555 FortiGate Firmware Downloading firmwareUpgrading the firmware Using the web-based managerReverting to a previous version Using the USB Auto-Install Backup and Restore from a USB keyTo revert to a previous firmware version Using the CLI To upgrade the firmware using the CLIExecute restore image namestr tftpip4 To revert to a previous firmware version using the CLIInstalling firmware from a system reboot using the CLI Execute restore image namestr tftpipv4To install firmware from a system reboot Press any key to display configuration menuRestoring the previous configuration To backup configuration using the CLITo restore configuration using the CLI Additional CLI Commands for a USB keyTo configure the USB Auto-Install using the CLI Testing new firmware before installing To test the new firmware imageTesting new firmware before installing Testing new firmware before installing Index System modem 43 system reboot, installing Page Page Page Page

60B specifications

The Fortinet FortiGate 60B is a compact, high-performance network security appliance designed for small to medium-sized businesses. As part of Fortinet's FortiGate series, the 60B integrates advanced security features and technologies, making it an ideal solution for organizations seeking to protect their networks from growing cyber threats.

One of the main features of the FortiGate 60B is its robust firewall capability. The device provides next-generation firewall (NGFW) functionalities, allowing businesses to monitor and control traffic at multiple layers. This includes application control, intrusion prevention, and web filtering, ensuring that only legitimate traffic is allowed access to critical resources. With a strong emphasis on threat detection, the 60B employs FortiGuard Labs' threat intelligence services to stay updated on the latest malware and attack vectors.

Another significant characteristic of the FortiGate 60B is its integrated virtual private network (VPN) capabilities. The device supports both site-to-site and remote access VPNs, enabling secure connections for remote employees and branch offices. This feature is essential for organizations that require secure communication over public networks, ensuring that sensitive data remains protected.

Performance is also a focal point of the FortiGate 60B. The appliance is equipped with dedicated hardware acceleration that optimizes throughput and minimizes latency. With impressive SSL inspection capabilities, it can handle encrypted traffic efficiently, making it well-suited for an increasingly secure internet landscape.

The FortiGate 60B also boasts extensive reporting and analytics features, enabling IT teams to gain valuable insights into network activity. This includes detailed logs and dashboards that help organizations identify potential security risks and respond to incidents in real time. In addition, the appliance is built with scalability in mind, allowing businesses to expand their security posture as they grow.

Furthermore, the FortiGate 60B is designed for ease of management. The unit can be configured and monitored through Fortinet's centralized management system, FortiManager, simplifying the administration of multiple devices across various locations.

In summary, the Fortinet FortiGate 60B is a powerful, versatile network security solution that combines advanced firewall capabilities, VPN support, and integrated threat intelligence. With its strong performance metrics and user-friendly management tools, it is an excellent choice for organizations aiming to bolster their cybersecurity defenses while maintaining operational efficiency.