IPS
Signature
FortiGate-500A Administration Guide
01-28006-0100-20041105
297
Predefined signature list
You can enable or disable groups of predefined signatures and configure the settings
for individual predefined signatures from the predefined signature list.
Figure 141:A portion of the predefined signature list
Table 24
describes each possible action you can select for predefined signatures.
Group Name
The signature group names.
Enable
The status of the signature group. A white check mark in a green circle
indicates the signature group is enabled. A white X in a grey circle indicates
the signature group is disabled.
Logging
The logging status for individual signatures. Click on the blue triangle to
show the signature group members. A white check mark in a green circle
indicates logging is enabled for the signature. A white X in a grey circle
indicates logging is disabled for the signature.
Action
The action set for individual signatures. Click on the blue triangle to show
the signature group members. Action can be Pass, Drop, Reset, Reset
Client, Reset Server, Drop Session, Clear Session, or Pass Session. See
Table 24
.
Revision
The revision number for individual signatures. To show the signature group
members, click on the blue triangle.
Modify
The Configure and Reset icons. Reset only appears when the default
settings have been modified. Selecting Reset restores the default settings.
Table 24: Actions to select for each predefined signature
Action
Description
Pass
The FortiGate unit lets the packet that triggered the signature pass
through the firewall. If logging is disabled and action is set to Pass, the
signature is effectively disabled.
Drop
The FortiGate unit drops the packet that triggered the signature. Fortinet
recommends using an action other than Drop for TCP connection based
attacks.
Reset
The FortiGate unit drops the packet that triggered the signature, sends a
reset to both the client and the server, and removes the session from the
FortiGate session table. Used for TCP connections only. If you set this
action for non-TCP connection based attacks, the action will behave as
Clear Session. If the Reset action is triggered before the TCP connection
is fully established it acts as Clear Session.
Summary of Contents for FortiGate FortiGate-500A
Page 24: ...24 01 28006 0100 20041105 Fortinet Inc Customer service and technical support Introduction...
Page 46: ...46 01 28006 0100 20041105 Fortinet Inc Changing the FortiGate firmware System status...
Page 72: ...72 01 28006 0100 20041105 Fortinet Inc FortiGate IPv6 support System network...
Page 80: ...80 01 28006 0100 20041105 Fortinet Inc Dynamic IP System DHCP...
Page 110: ...110 01 28006 0100 20041105 Fortinet Inc FortiManager System config...
Page 116: ...116 01 28006 0100 20041105 Fortinet Inc Access profiles System administration...
Page 134: ...134 01 28006 0100 20041105 Fortinet Inc Shutdown System maintenance...
Page 248: ...248 01 28006 0100 20041105 Fortinet Inc CLI configuration Users and authentication...
Page 324: ...324 01 28006 0100 20041105 Fortinet Inc CLI configuration Antivirus...
Page 386: ...386 01 28006 0100 20041105 Fortinet Inc Glossary...
Page 394: ...394 01 28006 0100 20041105 Fortinet Inc Index...
