Fortinet FortiGate-60 series, Administration Manual

Page: 229 / 388

Firewall Protection profile
FortiGate-60 Administration Guide 01-28006-0002-20041105
229
firewall profile command keywords and variables
Keywords and
variables Description Default Availability
ftp
{block
content_log
oversize
quarantine scan
splice }
Select the actions that this profile will
use for filtering FTP traffic for a policy.
Entering
splice
enables the
FortiGate unit to simultaneously buffer
a file for scanning and upload the file
to an FTP server. If a virus is detected,
the FortiGate unit stops the upload and
attempts to delete the partially
uploaded file from the FTP server. To
delete the file successfully, the server
permissions must be set to allow
deletes. When downloading files from
an FTP server the FortiGate unit sends
1 byte every 30 seconds to prevent the
client from timing out during scanning
and download. If a virus is detected,
the FortiGate unit stops the download.
The user must then delete the partially
downloaded file. There should not be
enough content in the file to cause any
harm. Enabling splice reduces
timeouts when uploading and
downloading large files. When splice is
disabled for ftp, the FortiGate unit
buffers the file for scanning before
uploading it to the FTP server. If the
file is clean, the FortiGate unit will
allow the upload to continue.
Enter all the actions you want this
profile to use. Use a space to separate
the options you enter. If you want to
remove an option from the list or add
an option to the list, you must retype
the list with the option removed or
added.
No default. All models.