Types of objects
The page displays the following object categories:
Firewall Objects
Firewall objects are components of the firewall that go together like interlocking building blocks. Firewall objects can be configured once and then reused.
Firewall objects include address, schedule, service and virtual IP.
Address
You can specify an address as a country, FQDN, or an IP subnet and mask. The address can apply to all interfaces or you can configure a specific interface.
You can also create address groups, which define a group of related addresses.
Schedule
You can specify a set of days and time ranges with recurring or one-time schedules.
Service
Although numerous services are already configured, the system allows for administrators to configure their own.
The service object specifies the protocol and any additional information required to identify the service (which depends on the protocol):
- IP: IP protocol number.
- TCP/UDP/SCTP: Address and destination port range.
- ICMP: Type and code.
Virtual IP
The Virtual IP objects map external IP addresses to internal addresses.
FortiPortal supports the following Virtual IP object types:
- Virtual IP: Uses static NAT to map a range of external addresses to an internal address range.
- Virtual IP Group: A group of one or more Virtual IPs, for ease of administration
Security Profiles
Security features protecting the network from threats are together known as security profiles.
The following security profiles are supported on FortiPortal:
Antivirus Profile
Use the antivirus profile to detect and identify viruses.
Intrusion Prevention Profile
Use intrusion prevention profiles to protect your network against hacking and attempts to exploit vulnerabilities.
Local Category
You can create a local category and then use rating override to assign URLs to the new category.
Web Rating Overrides
Use a Web Rating Override object to override the rating for a URL.
Web Filter Profile
Set up a web filter profile to protect or limit user activity on the web.
Application Control
Use application control to detect network traffic and control application communication.
File Filter Profile
Use file filters to perform file type inspection.
Video Filter
Use the video filter to filter YouTube videos by category or channel.
SSL/SSH Inspection
Use the SSL/SSH iinspection profile to perform deep inspection on encrypted traffic.
User & Device
Security policies may allow access to specified users and user groups only.
User
A user is a user account consisting of username, password, and in some cases other information, configured on the firewall unit or on an external authentication server. Users can access resources that require authentication only if they are members of an allowed user group.
You can create local users (accounts stored on the firewall unit), see Configuring a user.
Two-factor authentication
Two-factor authentication methods, including FortiToken, provide additional security.
User Group
A user group is a list of user identities. To add or edit a user group, see Configuring a user group.
|
After you set the group type and add members, you cannot change the group type without removing its members. If you change the type, members will be removed automatically. |