Fortinet 100A - Manual (Page 222)

222
01-28007-0068-20041203 Fortinet Inc.
Protection profile list Firewall
Protection profile
Use protection profiles to apply different protection settings for traffic that is controlled
by firewall policies. You can use protection profiles to:
• Configure antivirus protection for HTTP, FTP, IMAP, POP3, and SMTP policies
• Configure web filtering for HTTP policies
• Configure web category filtering for HTTP policies
• Configure spam filtering for IMAP, POP3, and SMTP policies
• Enable IPS for all services
Using protection profiles, you can customize types and levels of protection for different
firewall policies.
For example, while traffic between internal and external addresses might need strict
protection, traffic between trusted internal addresses might need moderate protection.
You can configure policies for different traffic services to use the same or different
protection profiles.
Protection profiles can be added to NAT/Route mode and Transparent mode policies.
This section describes:
• Protection profile list
• Default protection profiles
• Protection profile options
• Configuring protection profiles
• Profile CLI configuration
Protection profile list
Figure 104:Sample list showing the default protection profiles
The IP pool list has the following icons and features.
Create New Select Create New to add an IP pool.
Name The start IP defines the start of an address range.
The Delete and Edit/View icons.
Note: A protection profile cannot be deleted (and the Delete icon is not visible) if it is selected in
a firewall policy or included in a user group.