File Quarantine
AntiVirus
FortiGate Version 4.0 Administration Guide
446
01-400-89802-20090424
Figure 280: New file filter
To add a file pattern or type go to
UTM > AntiVirus > File Filter
. Select the Edit icon for a
file filter catalog. Select
Create New
.
File Quarantine
FortiGate units with a local disk, or FortiGate unit with a single width AMC slot containing a
FortiGate-ASM-S08 module, or a FortiGate-ASM-SAS module can quarantine blocked
and infected files. View the file name and status information about the file in the
Quarantined Files
list. Submit specific files and add file patterns to the
AutoSubmit
list so
they will automatically be uploaded to Fortinet for analysis.
FortiGate units can also quarantine blocked and infected files to a FortiAnalyzer unit. Files
stored on the FortiAnalyzer unit can also be viewed from the
Quarantined Files
list. To
configure quarantine to a FortiAnalyzer unit, go to
Log & Report > Log Config > Log
Setting
.
To configure and enable file quarantine
1
Go to
UTM > AntiVirus > Config
to configure the quarantine service and destination.
For details, see
“Configuring quarantine options” on page 449
2
Go to
Firewall > Protection Profile > Antivirus
to enable quarantine for required
protocols in the protection profiles. For details, see
“Configuring a protection profile” on
.
You can configure a protection profile to quarantine blocked and infected files from
HTTP, FTP, IMAP, POP3, SMTP, IM, and NNTP Traffic. If your FortiGate unit supports
SSL content scanning and inspection you can also quarantine blocked and infected
files from HTTPS, IMAPS, POP3S, and SMTPS traffic. To enable HTTPS quarantine
you must set
HTTPS Content Filtering Mode
to
Deep Scan
in the
Protocol Recognition
part of the protection profile. For more information, see
3
Go to
Firewall > Policy
and add the protection profile to a firewall policy.
Filter Type
Select
File Name Pattern
if you want to add a file pattern; select
File Type
and then
select a file type from the supported file type list.
Pattern
Enter the file pattern. The file pattern can be an exact file name or can include
wildcards. The file pattern can be 80 characters long.
File Type
Select a file type from the list. For information about supported file types, see
in patterns and supported file types” on page 443
Action
Select an action from the drop down list: Block, Allow, or Intercept. For more
information about actions, see
.
Enable
Select to enable the pattern.
Summary of Contents for Gate 60D
Page 705: ...www fortinet com...
Page 706: ...www fortinet com...
