Fortigate Firewall - UTM Crash Course

Explore the Fortiguard encyclopedia to learn about virus signatures and behavior, and see how to apply recommended actions for trojan threats across active, extended, and mobile databases.

Discover content disarm and reconstruction, which strips malicious content from office files, macros, and embedded media in proxy-based inspection, delivering originals and enabling quarantine to FortiSandbox on FortiGate 48 devices.

Enable content disarm and reconstruction for CVR in proxy-based inspection, choose discard or quarantine, enable sandbox inspection, and tune content types via the antivirus profile.

Create a ssl deep inspection that includes ssa deep scan, configure protocol options and antivirus limits for ssa, and enable the ssl filter profile to block fcp file transfers.

Explore Fortigate firewall UTM crash course: set up site authentication with flow-based inspection, create an allow all user group, configure a web filter with authenticate action, and verify sessions.

Use web filtering to limit education category sites with a five-minute usage quota in a security profile, enabling monitoring and blocking after expiry.

Master regular expressions to find text patterns across languages and tools. Build skills with character classes, ranges, escaping, and quantifiers to match domains and emails.

Explain how the dns filter processes domain requests by querying dns servers and returning the website's IP address and category, blocking at the initial domain-level connection.

Override a blocked application by applying an allow action in the remote security profile's application control. Verify the profile and confirm the application works under the override.

Explore how a Fortigate intrusion prevention system (ips) detects and blocks threats by distinguishing known attacks from anomalies, including zero-day activity.

Create a custom Fortigate UTM signature to block ICMP ping to the router by defining the ICMP protocol and destination address, apply it to the policy, and verify the block.