A static route must be configured by the administrator using the ssl.root interface as the outgoing interface.

Assignment of an IP address to the client causes a host route to be added to the FortiGate unit’s kernel routing table.

A route back to the SSLVPN IP pool is automatically created on the FortiGate unit.

The FortiGate unit adds a route based upon the destination address in the SSL VPN firewall policy.

A route to destination matching the ‘WIN2K3’ address object.

A route to the destination matching the ‘all’ address object.

A default route.

No route is added.

Manual update by downloading the signatures from the support site.

Pull updates from the FortiGate device

Push updates from the FortiGuard Distribution Network.

"update-AV/AS" command from the CLI

Proxy

DNS

Flow-based

Man-in-the-middle

The FortiGate unit can scan web pages and email messages for instances of banned words.

When creating a banned word list, an administrator can indicate either specific words or patterns.

Banned words can be expressed as simple text, wildcards or regular expressions.

Content is automatically blocked if a single instance of a banned word appears.

The FortiGate unit updates banned words on a periodic basis.