Configuring handling of unknown content types

FortiOS allows you to configure its behavior when handling unknown content types for the HTTP protocol.

Unknown content types for the HTTP protocol can be blocked (default), inspected, or bypassed:

config firewall profile-protocol-options
    edit <name>
        config http
            set unknown-content-encoding {block | inspect | bypass}
        end
    next
end

Option	Description
Block	Block the session when detecting an unknown content type (default)
inspect	Inspect the session as plain text when detecting an unknown content type
bypass	Bypass the session when detecting an unknown content type

For cases where legitimate websites with specific unknown content types are being accessed, or legitimate files with specific unknown content types are being downloaded, you can configure this setting as inspect or bypass.