Antivirus

FortiOS offers the unique ability to implement both flow-based and proxy-based antivirus concurrently, depending on the traffic type, users, and locations. Flow-based antivirus offers higher throughput performance, while proxy-based solutions are useful to mitigate stealthy malicious codes.

FortiOS includes two preloaded antivirus profiles:

• default
• wifi-default

You can customize these profiles, or you can create your own to inspect certain protocols, remove viruses, analyze suspicious files with FortiSandbox, and apply botnet protection to network traffic. Once configured, you can add the antivirus profile to a firewall policy.

This functionality requires a subscription to FortiGuard Antivirus.

The following topics provide information about antivirus profiles:

• Content disarm and reconstruction for antivirus
• FortiGuard Outbreak Prevention for antivirus
• External malware blocklist for antivirus
• Checking flow antivirus statistics
• CIFS support
• Databases

The following topics provide information about sandbox inspection with antivirus:

• Using FortiSandbox appliance with antivirus
• Using FortiSandbox Cloud with antivirus