FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
You can configure the FortiGate unit to control IM traffic. However, if the IM client uses HTTP, the FortiGate unit will block users from logging in even if you allow IM traffic in the protection profile. An IM client can use HTTP when configured to use a HTTP proxy, or when it found its default port and automatically tries to use HTTP on port 80 or 443.
An exception is MSN. If the MSN connections are going from the MSN download client (not MSN Web-messenger) directly to one of the MSN servers using HTTP, the FortiGate unit allows MSN to log in and use the IM proxy. If the user uses the Web-based MSN messenger, the FortiGate unit blocks the user from logging in. The FortiGate unit will also block the MSN client if it is running on a Macintosh and using a HTTP proxy.
