Local domain filter
Local domain filter In addition to FortiGuard’s category-based domain filter, you can also can define your own local static domain filter to allow or block specific domains. To configure DNS local...
View ArticleDNS translation
DNS translation Using this feature, you can translate a DNS resolved IP address to another IP address you specify. For example, website A has a public address 1.2.3.4. However, when your internal...
View ArticleHow To Manage A FortiSwitch via FortiGate
So this is how you setup a FortiGate to manage a FortiSwitch.
View ArticleUse FortiGate as a DNS server
Use FortiGate as a DNS server You can configure and use FortiGate as a DNS server in your network. When you enable DNS Service on a specific interface, FortiGate will listen for DNS Service on that...
View ArticleEmail filtering
Email filtering The FortiGate Email Filter can be configured to do AntiSpam and file-type based filtering. To enable email filtering, create a profile using either the CLI or GUI, then use this profile...
View ArticleEmail – Filtering types
Filtering types Local-based: BWL, black orwhite list: These lists can be made from emails or IP subnets to forbid OR allow them to sending/receiving emails. When referring to the IP address or email...
View ArticleEmail – Local-based filters
Local-based filters To configure the local-based AntiSpam filter in the CLI: config emailfilter bwl FGT-300D-SPAM (bwl) # edit 1 new entry ‘1’ added FGT-300D-SPAM (1) # set name myBWL FGT-300D-SPAM (1)...
View ArticleEmail – FortiGuard-based filters
FortiGuard-based filters FortiGate consults FortiGuard servers to help identify the spammers IP address or emails, known phishing URLs, known spam URLs, known spam email checksums, etc. FortiGuard...
View ArticleEmail – File-type based filters
File-type based filters File-type based email filters can be used to filter out emails which are undesired due to a file-type attachment that the network admin qualifies as non-compatible with their...
View ArticleProtocols and actions
Protocols and actions In an email filtering profile, there are sections for SMTP, POP3, and IMAP protocols. In each section, you can set an action to either discard, tag, or pass the log for that...
View ArticleEmail Filter – Webmail
Webmail The FortiGate email filter is intended to filter standard email protocols including SMTP, POP3, IMAP, and MAPI, however, it can also be configured to detect and log emails sent through some...
View ArticleEmail Filter – Checking the log
Checking the log To check the email filter log in the CLI: execute log filter category 5 execute log display 1 logs found. 1 logs returned. 1: date=2019-04-09 time=03:41:18 logid=”0510020491″...
View ArticleEmail Filter – File Filter for email filter
File Filter for email filter Introduction File Filter is a new feature introduced in FortiOS 6.2, and provides the Email filter profile with the capability to block files passing through a FortiGate...
View ArticleData leak prevention
Data leak prevention The FortiGate Data Leak Prevention (DLP) system prevents sensitive data from leaving your network. Data matching defined sensitive data patterns are blocked, logged, or allowed...
View ArticleBasic DLP filter types
Basic DLP filter types File type and name A file type filter allows you to block, allow, log, or quarantine based on the file type specified in the file filter list. To configure file type and name...
View ArticleDLP fingerprinting
DLP fingerprinting DLP fingerprinting can be used to detect sensitive data. The file that the DLP sensor will filter for is uploaded and the FortiGate generates and stores a checksum fingerprint. The...
View ArticleDLP watermarking
DLP watermarking Watermarking marks files with a digital pattern to designate them as proprietary to a specific company. A small pattern is added to the file that is recognized by the DLP watermark...
View ArticleHow To Auto Tag VOIP Phones To The Voice VLAN On A FortiSwitched Managed By A...
I had someone ask me how to tag a VOIP phone to the VOICE VLAN of a FortiSwitch that is managed by a FortiGate. The following Video shows you how!
View ArticleFlow mode inspection (default mode)
Flow mode inspection (default mode) When a firewall policy’s inspection mode is set to flow, traffic flowing through the policy will not be buffered by the FortiGate. Unlike proxy mode, the content...
View ArticleProxy mode inspection
Proxy mode inspection When a firewall policy’s inspection mode is set to proxy, traffic flowing through the policy will be buffered by the FortiGate for inspection. This means that the packets for a...
View Article