Introduction to Web Filter Web filtering is a means of controlling the content that an internet user is able to view. With the increased popularity of web applications, the need to monitor and control web access is becoming a key […]
AppCtrl protocol enforcement check Protocol enforcement allows you to configure networking services (e.g. FTP, HTTP, HTTPS) on known ports (e.g. 21, 80, 443). For protocols which are not whitelisted under select ports, the IPS engine performs the violation action to […]
AppCtrl port enforcement check Most networking applications run on specific ports. For example, SSH runs on port 22, and Facebook runs on port 80 and 443. If the default network service is enabled in the application control profile, a port […]
AppCtrl basic category filters and overrides Once you have created an application sensor, you can define the applications that you want to control. You can add applications and filters using categories, application overrides, and/or filter overrides. Categories: Choose groups of […]
TABLE OF CONTENTS Change Log 5 Change Log Date Change Description 2019-10-09 Initial release. 2019-10-10 Added 551119 to Resolved Issues. Added commands to the Previous releases column in Changes in CLI defaults SSH and SSL VPN sections. […]
Introduction to AppCtrl sensors FortiGate units can detect and take action against network traffic depending on the application generating the traffic. Based on FortiGate Intrusion Protection protocol decoders, application control is a user-friendly and powerful way to use Intrusion Protection […]
AntiVirus Content disarm and reconstruction for AntiVirus Introduction Content Disarm and Reconstruction (CDR) allows the FortiGate to sanitize Microsoft documents and PDF (disarm) by removing active content such as hyperlinks, embedded media, javascript, macros, etc. from the office document files […]
Traffic shaping Interface bandwidth limit You can limit interface bandwidth for arriving and departing traffic. In some cases, the traffic received on an interfaces could exceed the maximum bandwidth limit defined in the security policy. Rather than waste processing power […]
