config antivirus profile
Configure AntiVirus profiles.
config antivirus profile
Description: Configure AntiVirus profiles.
edit <name>
set comment {var-string}
set replacemsg-group {string}
set ftgd-analytics [disable|suspicious|...]
set analytics-max-upload {integer}
set analytics-wl-filetype {integer}
set analytics-bl-filetype {integer}
set analytics-db [disable|enable]
set mobile-malware-db [disable|enable]
config http
Description: Configure HTTP AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
end
config ftp
Description: Configure FTP AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
end
config imap
Description: Configure IMAP AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
set executables [default|virus]
end
config pop3
Description: Configure POP3 AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
set executables [default|virus]
end
config smtp
Description: Configure SMTP AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
set executables [default|virus]
end
config mapi
Description: Configure MAPI AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
set executables [default|virus]
end
config cifs
Description: Configure CIFS AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
end
config ssh
Description: Configure SFTP and SCP AntiVirus options.
set options [scan|avmonitor|...]
set archive-block [encrypted|corrupted|...]
set archive-log [encrypted|corrupted|...]
set emulator [enable|disable]
end
config nac-quar
Description: Configure AntiVirus quarantine settings.
set infected [none|quar-src-ip]
set expiry {user}
set log [enable|disable]
end
set av-virus-log [enable|disable]
set av-block-log [enable|disable]
set scan-mode [default|legacy]
next
end
config antivirus profile
|
Parameter |
Description |
Type |
Size |
|||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
comment |
Comment. |
var-string |
Maximum length: 255 |
|||||||||
|
replacemsg-group |
Replacement message group customized for this profile. |
string |
Maximum length: 35 |
|||||||||
|
ftgd-analytics |
Settings to control which files are uploaded to FortiSandbox. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
analytics-max-upload |
Maximum size of files that can be uploaded to FortiSandbox . |
integer |
Minimum value: 1 Maximum value: 200 |
|||||||||
|
analytics-wl-filetype |
Do not submit files matching this DLP file-pattern to FortiSandbox. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
|||||||||
|
analytics-bl-filetype |
Only submit files matching this DLP file-pattern to FortiSandbox. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
|||||||||
|
analytics-db |
Enable/disable using the FortiSandbox signature database to supplement the AV signature databases. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
mobile-malware-db |
Enable/disable using the mobile malware signature database. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
av-virus-log |
Enable/disable AntiVirus logging. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
av-block-log |
Enable/disable logging for AntiVirus file blocking. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
scan-mode |
Choose between default scan mode and legacy scan mode. |
option |
- |
|||||||||
|
|
|
|||||||||||
config http
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable HTTP AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config ftp
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable FTP AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config imap
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable IMAP AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
executables |
Treat Windows executable files as viruses for the purpose of blocking or monitoring. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config pop3
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable POP3 AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
executables |
Treat Windows executable files as viruses for the purpose of blocking or monitoring. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config smtp
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable SMTP AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
executables |
Treat Windows executable files as viruses for the purpose of blocking or monitoring. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config mapi
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable MAPI AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
executables |
Treat Windows executable files as viruses for the purpose of blocking or monitoring. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config cifs
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable CIFS AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config ssh
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
options |
Enable/disable SFTP and SCP AntiVirus scanning, monitoring, and quarantine. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-block |
Select the archive types to block. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
archive-log |
Select the archive types to log. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
emulator |
Enable/disable the virus emulator. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
config nac-quar
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
infected |
Enable/Disable quarantining infected hosts to the banned user list. |
option |
- |
|||||||
|
|
|
|||||||||
|
expiry |
Duration of quarantine. |
user |
Not Specified |
|||||||
|
log |
Enable/disable AntiVirus quarantine logging. |
option |
- |
|||||||
|
|
|
|||||||||