Fortinet FortiGate 60R, Installation And Configuration Manual

Page: 232 / 270

232
Fortinet Inc.
Blocking oversized files and emails Antivirus protection
Blocking oversized files and emails
You can configure the FortiGate unit to buffer 1 to 15 percent of available memory to
store oversized files and email. The FortiGate unit then blocks a file or email that
exceeds this limit instead of bypassing antivirus scanning and sending the file or email
directly to the server or receiver. The FortiGate unit sends a replacement message for
an oversized file or email attachment to the HTTP or email proxy client.
Configuring limits for oversized files and email
1 Go to Anti-Virus > Config > Config .
2 Type the size limit in MB.
3 Select Apply.
Exempting fragmented email from blocking
A fragmented email is a large email message that has been split into smaller
messages that are sent individually and recombined when they are received. By
default when antivirus protection is enabled, the FortiGate unit blocks fragmented
emails and replaces them with an email block message that is forwarded to the
receiver. It is recommend that you disable the fragmenting of email messages in the
client email software.
To exempt fragmented emails from automatic antivirus blocking, you can enable Pass
Fragmented Email for the email content protocols (IMAP, POP3, and SMTP).
Configure the FortiGate unit to pass fragmented emails by doing the following:
1 Enable Pass Fragmented Emails for IMAP, POP3, and SMTP traffic in a content
profile.
2 Select Anti-Virus & Web filter in a firewall policy. For example, to pass fragmented
emails that internal users send to the external network, select an internal to external
policy.
3 Select a content profile that has Pass Fragmented Emails enabled for the traffic that
you want the FortiGate unit to scan.
Viewing the virus list
Use the following procedure to view the names of the viruses and worms in the
current virus definition list:
1 To display the virus list, go to Anti-Virus > Config > Virus List .
2 Scroll through the virus and worm list to view the names of all viruses and worms in
the list.
!
Caution: The FortiGate unit cannot scan fragmented emails for viruses or use file pattern
blocking to remove files from these email messages.