config antivirus profile

Configure AntiVirus profiles.

Syntax

config antivirus profile
    edit <name>
        set av-block-log [enable|disable]
        set av-virus-log [enable|disable]
        config cifs
            Description: Configure CIFS AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        set comment {var-string}
        set extended-log [enable|disable]
        set ftgd-analytics [disable|suspicious|...]
        config ftp
            Description: Configure FTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        config http
            Description: Configure HTTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        config imap
            Description: Configure IMAP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config mapi
            Description: Configure MAPI AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config nntp
            Description: Configure NNTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        config pop3
            Description: Configure POP3 AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        set replacemsg-group {string}
        set scan-mode {option}
        config smtp
            Description: Configure SMTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config ssh
            Description: Configure SFTP and SCP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
    next
end

Parameters

Parameter

Description

Type

Size

Default

av-block-log

Enable/disable logging for AntiVirus file blocking.

option

enable

Option	Description
enable	Enable setting.
disable	Disable setting.

av-virus-log

Enable/disable AntiVirus logging.

option

enable

Option	Description
enable	Enable setting.
disable	Disable setting.

comment

Comment.

var-string

Maximum length: 255

extended-log

Enable/disable extended logging for antivirus.

option

disable

Option	Description
enable	Enable setting.
disable	Disable setting.

ftgd-analytics

Settings to control which files are uploaded to FortiSandbox.

option

disable

Option	Description
disable	Do not upload files to FortiSandbox.
suspicious	Submit files supported by FortiSandbox if heuristics or other methods determine they are suspicious.
everything	Submit all files scanned by AntiVirus to FortiSandbox. AntiVirus may not scan all files.

name

Profile name.

string

Maximum length: 35

replacemsg-group

Replacement message group customized for this profile.

string

Maximum length: 35

scan-mode

Choose between default scan mode and legacy scan mode.

option

default

Option	Description
default	On the fly decompression and scanning of certain archive files.

config cifs

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config ftp

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config http

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config imap

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config mapi

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config nntp

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config pop3

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config smtp

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config ssh

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config antivirus profile

Configure AntiVirus profiles.

Syntax

config antivirus profile
    edit <name>
        set av-block-log [enable|disable]
        set av-virus-log [enable|disable]
        config cifs
            Description: Configure CIFS AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        set comment {var-string}
        set extended-log [enable|disable]
        set ftgd-analytics [disable|suspicious|...]
        config ftp
            Description: Configure FTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        config http
            Description: Configure HTTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        config imap
            Description: Configure IMAP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config mapi
            Description: Configure MAPI AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config nntp
            Description: Configure NNTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
        config pop3
            Description: Configure POP3 AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        set replacemsg-group {string}
        set scan-mode {option}
        config smtp
            Description: Configure SMTP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config ssh
            Description: Configure SFTP and SCP AntiVirus options.
            set archive-block {option1}, {option2}, ...
            set archive-log {option1}, {option2}, ...
            set av-scan [disable|block|...]
            set emulator [enable|disable]
        end
    next
end

Parameters

Parameter

Description

Type

Size

Default

av-block-log

Enable/disable logging for AntiVirus file blocking.

option

enable

Option	Description
enable	Enable setting.
disable	Disable setting.

av-virus-log

Enable/disable AntiVirus logging.

option

enable

Option	Description
enable	Enable setting.
disable	Disable setting.

comment

Comment.

var-string

Maximum length: 255

extended-log

Enable/disable extended logging for antivirus.

option

disable

Option	Description
enable	Enable setting.
disable	Disable setting.

ftgd-analytics

Settings to control which files are uploaded to FortiSandbox.

option

disable

Option	Description
disable	Do not upload files to FortiSandbox.
suspicious	Submit files supported by FortiSandbox if heuristics or other methods determine they are suspicious.
everything	Submit all files scanned by AntiVirus to FortiSandbox. AntiVirus may not scan all files.

name

Profile name.

string

Maximum length: 35

replacemsg-group

Replacement message group customized for this profile.

string

Maximum length: 35

scan-mode

Choose between default scan mode and legacy scan mode.

option

default

Option	Description
default	On the fly decompression and scanning of certain archive files.

config cifs

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config ftp

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config http

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config imap

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config mapi

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config nntp

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config pop3

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config smtp

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

default

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config ssh

Parameter

Description

Type

Size

Default

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
partiallycorrupted	Block partially corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives that exceed uncompressed nest limit.
mailbomb	Block mail bomb archives.
fileslimit	Block exceeded archive files limit.
timeout	Block scan timeout.
unhandled	Block archives that FortiOS cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
partiallycorrupted	Log partially corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives that exceed uncompressed nest limit.
mailbomb	Log mail bomb archives.
fileslimit	Log exceeded archive files limit.
timeout	Log scan timeout.
unhandled	Log archives that FortiOS cannot open.

av-scan

Enable AntiVirus scan service.

option

disable

Option	Description
disable	Disable.
block	Block the virus infected files.
monitor	Log the virus infected files.

emulator

Enable/disable the virus emulator.

option

enable

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

CLI Reference

config antivirus profile

config antivirus profile

Syntax

Parameters

config cifs

config ftp

config http

config imap

config mapi

config nntp

config pop3