FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
You can configure the FortiGate unit to control IM traffic. However, if the IM client uses HTTP, it will be blocked from logging in even if it is enabled under IM/P2P of firewall protection profile. This issue affects FortiOS 3.0 and 4.0.
The exception is MSN. If the MSN connections are going from the MSN download client (not MSN Web-messenger) directly to one of the MSN servers via HTTP (not via a proxy), MSN is allowed to login and fully controlled by the IM proxy. If the MSN client uses a HTTP proxy, or if the user uses the Web-based MSN messenger which uses HTTP, it is blocked from logging on.
