隔离

防病毒保护

 

 

文件名

被隔离的文件的文件名。文件名中的空格将被删除。当文件被隔离时,它会

 

被添加一个 32 比特的校验和并用以下格式存贮在 FortiGate 硬盘上:

 

<32bit CRC>.< 被处理过的文件名 >

 

例如,一个名为 Over Size.exe 的文件按以下格式存储:

 

3fc155d2.oversize.exe。

隔离日期

文件被隔离时的日期和时间,按如下格式存储:天天 / 月月 / 年年年年 时

 

时 : 分分。如果这个文件存在多个副本,这个时间指的是第一个被隔离的文

 

件被存储的时间。

服务

被隔离的文件所用的协议 (HTTP, FTP, IMAP, POP3, SMTP)。

状态

用颜色表示的状态指示:

 

t 红:文件被感染

 

t 黄:文件被启发式扫描捕获

 

t 绿:文件被阻塞样板所阻塞

 

t 蓝:文件大小超过了限制

 

Fortinet 建议您将状态为黄色的文件发送到 Forti 响应中心,因为这些文

 

件可能含有新的病毒或已知病毒的变种。

状态描

指出与状态相关的信息。例如 文件被 W32/Klez.h病毒感染

 

件被文件阻塞样板所阻塞

DC

副本数统计。统计出文件一共被重复地隔离了多少次。如果 DC 迅速地增加

 

则很有可能是某种病毒发作了。

TTL

以 时时 : 分分 表示的剩余时间。当 TTL 耗尽时,FortiGate 设备自动删除

 

文件。对于重复的文件,每新发现一个副本都将刷新 TTL。

修改

您可以删除或下载这个文件。当您下载一个文件时,它将以原始的格式传

 

输。

注意:在文件存在副本的情况下,除了 TTL 之外,所有的项目只与最初被隔离的文件有关。TTL 则在每次发现一个新的副本的时候被刷新一次。重复文件 (基于校验和)不被存储,但是每个 文件的内部计数器将记录文件重复的次数。

隔离列表排序

您可以根据状态 (感染或阻塞)、服务 (IMAP, POP3, SMTP, FTP, 或 HTTP), 文件 名的字顺序、隔离日期、余时间 (TTL) 或本数将隔离列表排序。

1 进入 病毒防护 > 隔离

2 在列表排序中选择一个列标题以将列表排序。

3 单击应用。

过滤隔离列表

您可以将隔离列表过滤以控制它的显示:

·显示被阻塞的文件 ·显示被感染的文件

·显示在 IMAP, POP3, SMTP, FTP, 或 HTTP 通讯中被阻塞和被感染的文件

从隔离区中删除文件

1 进入 病毒防护 > 隔离

2 单击删除 以从列表中删除被隔离的文件。

下载被隔离的文件

1 进入病毒防护 > 隔离

224

美国飞塔有限公司

Page 236
Image 236
Fortinet 500 manual 隔离列表排序, 过滤隔离列表, 从隔离区中删除文件, 下载被隔离的文件, 224

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.