Administration Guide

Home FortiIsolator 2.0.1 Administration Guide

2.0.1

Configuring policies and profile

Creating Isolator browsing profile

Configure the Isolator profile to dictate how the end user browses the web through FortiIsolator. There are various settings for you to configure, including the bandwidth use and end user privileges.

Steps

From the administration portal, go to Policies and Profiles > Profile and click Create New.
From the Profile Type drop-down menu, select Isolator Profile and click OK.
Fill in the new Isolator profile information with desired settings.
1. Type in the maximum file size in megabytes for uploading and downloading files.
2. By selecting the Limit of view only box, you limit the user to view-only access of web pages. The user is restricted from interacting with the pages, such as right-clicking or typing in text.
3. By selecting the Scan files for malware box, you allow files to be scanned by Vscanner.
4. You can increase or decrease bandwidth usage by selecting the desired Image Quality and Video Frame Rate from the corresponding drop-down menus.
5. By selecting the Use doc-rewrite when scanning file box, you allow rewriting of documents during file scanning such that embedded links in the file are rendered inactive.

Creating web filter profile

FortiIsolator supports web filtering, which enables the administrator to control which webpages that end users are allowed to view. You can block specific URLs or websites, which prevents the end user's browser from loading webpaes from these websites.

Prerequisites

Ensure that FortiIsolator has a valid license installed.
Register the device to a production server: https://support.fortinet.com/product/RegistrationEntry.aspx.
Ensure that the IP address in the FortiIsolator license is the same as the FortiIsolator management IP address.

Steps

From the administration portal, go to Policies and Profiles > Profiles and click Create New.
From the Profile Type drop-down menu, select Web Filter Profile and click OK. You will be brought to the Edit Web Filter Profile page.
Enter a Web Filter Profile Name.
To change web filters for specific categories or subcategories, check the boxes next to the categories or subcategories that you wish to modify. To access the subcategories list, expand the category by clicking the small triangle next to the category.
Right click on any checked box to select the desired action:
1. View-only: End user is restricted to view-only access and is unable to interact with the web page, including clicking links and downloading files.
2. Block: End user is restricted from accessing the web page and will be shown a page informing them that the URL has been blocked by the administrator.
3. Allow: End user has full access of the website. By default, all web categories are allowed.
To white list or black list specific websites, click the corresponding Create New button in the White List or Black List section. Enter the URL details and click OK. The white list and black list filters accept simple URLs, regular expressions, wildcards, and exemptions as URL filter criteria.
To finish creating the Web Filter Profile, click Submit.
To verify that the web filter is working, try browsing to one of the blocked web pages. You should see the following text displayed in your browser:

Creating a policy

A policy provides a convenient way to apply a certain Isolator profile and/or Web Filter profile to local individual users or user groups. Policies are not active until they are applied. See the next section Applying Isolator profile and Web Filter profile settings

Steps

To create a new policy, go to Policies and Profiles > Policies and click Create New Policy.
Type in a name for the policy and select the desired Isolator and/or Web Filter profiles to be used in the policy.
Click OK to finish.

Applying Isolator profile and Web Filter profile settings

There are several ways you can apply Isolator profile and Web Filter profile settings to end users. Isolator profiles and Web Filter profiles can be applied to the guest account, individual local user accounts, and/or local user groups.

Applying default policy and profile settings

Steps

From the administration portal, go to Policies and Profiles > Default Policy.
From the Default Isolator Profile Name drop-down menu, select the Isolator profile you wish to apply.
From the Default WebFilter Profile Name drop-down menu, select the Web Filter profile you wish to apply.
Click OK to finish.

Applying profile settings to local user account

Steps

From the administration portal, go to Policies and Profiles > Policies and make sure the policy you want to apply exists. If not, create a new policy with the desired profiles.
Go to Users > User Definition. Select the user you wish to apply the profile settings to and click Edit.
From the Policy Name drop-down menu, select the policy you wish to apply to the local user
Click OK to finish.

Applying profile settings to user groups

Steps

From the administration portal, go to Policies and Profiles > Policies and make sure the policy you want to apply exists. If not, create a new policy with the desired profiles.
Go to Users > User Groups. Select the user group you wish to apply the profile settings and click Edit.
From the Policy Name drop-down menu, select the policy you wish to apply to the uesr group.
Click OK to finish.