Fortinet FortiGate-60 series, Administration Manual

Page: 314 / 388

314
01-28006-0002-20041105 Fortinet Inc.
CLI configuration Antivirus
Command syntax pattern
config antivirus quarantine
set <keyword> <variable>
end
config antivirus quarantine
unset <keyword>
end
get antivirus quarantine
show antivirus quarantine
service http
Use this command to configure how the FortiGate unit handles antivirus scanning of
large files and what ports the FortiGate unit virus scans for HTTP traffic.
Command syntax pattern
config antivirus service http
set <keyword> <variable>
end
config antivirus service http
unset <keyword>
end
get antivirus service [http]
show antivirus service [http]
antivirus quarantine command keywords and variables
Keywords and variables Description Default Availability
drop_heuristic
{ftp http imap pop3 smtp}
Do not quarantine files found by
heuristic scanning in traffic for the
specified protocols.
imap
smtp
pop3
http
ftp
FortiGate
models
numbered
200 and
higher.
store_heuristic
{ftp http imap pop3 smtp}
Quarantine files found by heuristic
scanning in traffic for the specified
protocols.
No
default.
FortiGate
models
numbered
200 and
higher.
Note: This command has more keywords than are listed in this Guide. See the FortiGate CLI
Reference Guide for a complete list of commands and keywords.
Table 27: antivirus service http command keywords and variables
Keywords and variables Description Default Availability
port <port_integer>
Configure antivirus scanning on a
nonstandard port number or
multiple port numbers for HTTP.
You can use ports from the range
1-65535. You can add up to 20
ports.
80 All models.