AntiVirus

FortiPAM offers the unique ability to prevent, detect, and remove malware when you transfer files between local PCs and privileged servers. FortiPAM will detect the potential malware uploaded to or downloaded from the related secret server if a secret is configured with an antivirus profile. Examples of file launchers include WinSCP, Web SMB, and Web SFTP.

For each antivirus profile; name, comments, and references are displayed.

A default antivirus profile is available that blocks malware transmission.

Once configured, you can add the antivirus profile to a secret. See Enabling antivirus scan in a secret.

You can also customize these profiles or create your profile to inspect specific protocols, remove viruses, analyze suspicious files with FortiSandbox, and apply botnet protection to network traffic. Note that for Web SMB and Web SFTP launchers, you must inspect the HTTP protocol in the AV profile. While for WinSCP launcher, SSH protocol needs to be inspected.

The AntiVirus tab contains the following options:

Create New	Select to create a new antivirus profile. See Creating an antivirus profile.
Edit	Select to edit the selected antivirus profile.
Clone	Select to clone the selected antivirus profile.
Delete	Select to delete the selected antivirus profiles.
Search	Enter a search term in the search field, then hit Enter to search the antivirus profile list.