Web 内容过滤

简介

 

 

如果 FortiGate 设备内配有硬盘,可以将被感染或被阻塞的文件隔离。FortiGate 管理员可以下载被隔离的文件,然后对它们进行病毒扫描,杀毒,再将它们发送给原 来的接收者。您也可以将 FortiGate 设备配置为每过一段时间就自动删除被隔离的文 件。

当 FortiGate 设备从内容流中检测到病毒并将它删除的时候,它可以向系统管理员 发送一封报警邮件。

ICSA LABS 认证了 FortiGates 的以下功能:

·100% 检测到 The Wild List(www.wildlist.org) 中列举的所有病毒。

·检测 PKZip 格式压缩文件中的病毒。

·检测以 UUENCODE 格式编码的 EMAIL 中的病毒。 ·检测以 MIME 格式编码的 EMAIL 中的病毒。 ·在扫描同时对所有动作进行日志记录。

Web 内容过滤

FortiGate Web 内容过滤可设置为扫描 URL 和 WEB 网页内容中的全部 HTTP 内容协 议数据流。如果在 URL 阻塞列表中找到与 URL 匹配的条目 , 或在网页中发现了内容阻 塞列表中的词或短语, FortiGate 将阻塞此页。被阻塞的网页会被一条内容阻塞消息 所替代,您可以使用基于 Web 的管理程序编缉这个消息。

通过设置 URL 阻塞可以阻挡来自某一网站上的所有或部分网页。利用这一特点, 可拒绝某个站点中的部分而不是阻塞整个网站。

为防止无意封锁到一些合法的网页,可将 URLs 添加到一则例外列表中,从而覆盖 URL 封锁及内容封锁列表中的设置。

Web 网页内容过滤也包括脚本过滤,它可以配置为阻塞如下一些非安全 web 内容 如 Java 小程序、Cookies、ActiveX。

您还可以使用 Cerberian URL 阻塞去阻塞不受欢迎的 URL。

电子邮件过滤

通过配置 FortiGate 的电子邮件过滤功能,可以扫描所有的 IMAP 和 POP3 邮件内 容,找出不受欢迎的发件人或不受欢迎的内容。如果发现某个邮件的发件人地址与电 子邮件阻塞列表中的某一项相匹配,或者在邮件的内容中含有和禁忌词汇列表中的词 汇相匹配的内容,FortiGate 会在这个邮件的标题栏中添加一个电子邮件标签。接收者 可以用他们的电子邮件客户端软件根据这个电子邮件标签过滤不想要的邮件。

对于所有的或部分已知的广告邮件发送组织,您可以通过配置电子邮件阻塞功能在 属于这些组织的发件人所发送的电子邮件上添加电子邮件标签。为了避免无意中在正 常发件人发送的邮件上加上电子邮件标签,您可以将发件人的地址模板添加到一个排 除列表中,以使该发件人发送的邮件不收邮件阻塞功能和禁忌词汇列表的限制。

2

美国飞塔有限公司

Page 14
Image 14
Fortinet 500 manual Web 内容过滤, 电子邮件过滤

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.