Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiProxy 7.6.0 CLI Reference
    7.6.0
    7.6.1
    7.6.0
    7.4.6
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.12
    7.2.11
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.0.19
    7.0.18
    7.0.17
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    2.0.13
    2.0.12
    2.0.0
    1.2.4

    config file-filter profile

    config file-filter profile

    Configure file-filter profiles.

    config file-filter profile
    Description: Configure file-filter profiles.
    edit <name>
        set comment {var-string}
        set replacemsg-group {string}
        set log [disable|enable]
        set scan-archive-contents [disable|enable]
        config rules
            Description: File filter rules.
            edit <name>
                set comment {var-string}
                set protocol {option1}, {option2}, ...
                set action [log-only|block]
                set direction [incoming|outgoing|...]
                set password-protected [yes|any]
                set file-type <name1>, <name2>, ...
            next
        end
    next
end

    config file-filter profile

    Parameter

    Description

    Type

    Size

    Default

    name

    Profile name.

    string

    Maximum length: 35

    comment

    Comment.

    var-string

    Maximum length: 255

    replacemsg-group

    Replacement message group.

    string

    Maximum length: 35

    log

    Enable/disable file-filter logging.

    option

    -

    enable

    Option

    Description

    disable

    Disable logging.

    enable

    Enable logging.

    scan-archive-contents

    Enable/disable archive contents scan.

    option

    -

    enable

    Option

    Description

    disable

    Disable scanning archive contents.

    enable

    Enable scanning archive contents.

    config rules

    Parameter

    Description

    Type

    Size

    Default

    name

    File-filter rule name.

    string

    Maximum length: 35

    comment

    Comment.

    var-string

    Maximum length: 255

    protocol

    Protocols to apply rule to.

    option

    -

    http ftp smtp imap pop3 mapi cifs ssh

    Option

    Description

    http

    Filter on HTTP.

    ftp

    Filter on FTP.

    smtp

    Filter on SMTP.

    imap

    Filter on IMAP.

    pop3

    Filter on POP3.

    mapi

    Filter on MAPI. (Proxy mode only.)

    cifs

    Filter on CIFS.

    ssh

    Filter on SFTP and SCP. (Proxy mode only.)

    action

    Action taken for matched file.

    option

    -

    log-only

    Option

    Description

    log-only

    Allow the content and write a log message.

    block

    Block the content and write a log message.

    direction

    Traffic direction (HTTP, FTP, SSH, CIFS, and MAPI only).

    option

    -

    any

    Option

    Description

    incoming

    Match files transmitted in the session's reply direction.

    outgoing

    Match files transmitted in the session's originating direction.

    any

    Match files transmitted in the session's originating and reply directions.

    password-protected

    Match password-protected files.

    option

    -

    any

    Option

    Description

    yes

    Match only password-protected files.

    any

    Match any file.

    file-type <name>

    Select file type.

    File type name.

    string

    Maximum length: 39

    Previous
    Next

    config file-filter profile

    config file-filter profile

    Configure file-filter profiles.

    config file-filter profile
    Description: Configure file-filter profiles.
    edit <name>
        set comment {var-string}
        set replacemsg-group {string}
        set log [disable|enable]
        set scan-archive-contents [disable|enable]
        config rules
            Description: File filter rules.
            edit <name>
                set comment {var-string}
                set protocol {option1}, {option2}, ...
                set action [log-only|block]
                set direction [incoming|outgoing|...]
                set password-protected [yes|any]
                set file-type <name1>, <name2>, ...
            next
        end
    next
end

    config file-filter profile

    Parameter

    Description

    Type

    Size

    Default

    name

    Profile name.

    string

    Maximum length: 35

    comment

    Comment.

    var-string

    Maximum length: 255

    replacemsg-group

    Replacement message group.

    string

    Maximum length: 35

    log

    Enable/disable file-filter logging.

    option

    -

    enable

    Option

    Description

    disable

    Disable logging.

    enable

    Enable logging.

    scan-archive-contents

    Enable/disable archive contents scan.

    option

    -

    enable

    Option

    Description

    disable

    Disable scanning archive contents.

    enable

    Enable scanning archive contents.

    config rules

    Parameter

    Description

    Type

    Size

    Default

    name

    File-filter rule name.

    string

    Maximum length: 35

    comment

    Comment.

    var-string

    Maximum length: 255

    protocol

    Protocols to apply rule to.

    option

    -

    http ftp smtp imap pop3 mapi cifs ssh

    Option

    Description

    http

    Filter on HTTP.

    ftp

    Filter on FTP.

    smtp

    Filter on SMTP.

    imap

    Filter on IMAP.

    pop3

    Filter on POP3.

    mapi

    Filter on MAPI. (Proxy mode only.)

    cifs

    Filter on CIFS.

    ssh

    Filter on SFTP and SCP. (Proxy mode only.)

    action

    Action taken for matched file.

    option

    -

    log-only

    Option

    Description

    log-only

    Allow the content and write a log message.

    block

    Block the content and write a log message.

    direction

    Traffic direction (HTTP, FTP, SSH, CIFS, and MAPI only).

    option

    -

    any

    Option

    Description

    incoming

    Match files transmitted in the session's reply direction.

    outgoing

    Match files transmitted in the session's originating direction.

    any

    Match files transmitted in the session's originating and reply directions.

    password-protected

    Match password-protected files.

    option

    -

    any

    Option

    Description

    yes

    Match only password-protected files.

    any

    Match any file.

    file-type <name>

    Select file type.

    File type name.

    string

    Maximum length: 39

    Previous
    Next