NAT/Route mode installation | Enabling antivirus protection |
|
|
Enabling antivirus protection
To enable antivirus protection to protect users on your internal network from downloading a virus from the Internet:
1Go to Firewall > Policy >
2Select Edit 
to edit this policy.
3Select
4Select the Scan Content Profile.
5Select OK to save your changes.
Registering your FortiGate
After purchasing and installing a new FortiGate unit, you can register the unit by going to System > Update > Support, or using a web browser to connect to http://support.fortinet.com and selecting Product Registration.
Registration consists of entering your contact information and the serial numbers of the FortiGate units you or your organization have purchased. Registration is quick and easy. You can register multiple FortiGate units in a single session without
For more information about registration, see “Registering FortiGate units” on page 101.
Configuring virus and attack definition updates
You can go to System > Update to configure the FortiGate unit to automatically check to see if new versions of the virus definitions and attack definitions are available. If it finds new versions, the FortiGate unit automatically downloads and installs the updated definitions.
The FortiGate unit uses HTTPS on port 8890 to check for updates. The FortiGate external interface must have a path to the FortiResponse Distribution Network (FDN) using port 8890.
To configure automatic virus and attack updates, see “Updating antivirus and attack definitions” on page 91.
Configuration example: Multiple connections to the Internet
This section describes some basic routing and firewall policy configuration examples for a FortiGate unit with multiple connections to the Internet (see Figure 8). In this topology, the organization operating the FortiGate unit uses two Internet service providers to connect to the Internet. The FortiGate unit is connected to the Internet using the external and DMZ interfaces. The external interface connects to gateway 1, operated by ISP1 and the DMZ interface connects to gateway 2, operated by ISP2.
By adding ping servers to interfaces, and by configuring routing you can control how traffic uses each Internet connection. With this routing configuration is place you can proceed to create firewall policies to support multiple internet connections.
49 |
