Fortinet Gate 60D, Administration Manual

Page: 450 / 706

File Quarantine AntiVirus
FortiGate Version 4.0 Administration Guide
450 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
Figure 285: Quarantine Configuration (SSL content scanning and inspection and quarantine
to disk)
Quarantine configuration has the following options:
Figure 286: Notification lists
Options Quarantine Infected Files: Select the protocols from which to quarantine infected
files identified by antivirus scanning.
Quarantine Suspicious Files: Select the protocols from which to quarantine
suspicious files identified by heuristic scanning.
Quarantine Blocked Files. Select the protocols from which to quarantine blocked
files identified by antivirus file filtering. The
Quarantine Blocked Files option is not
available for IM and HTTPS because a file name is blocked before downloading
and cannot be quarantined.
Age limit The time limit in hours for which to keep files in quarantine. The age limit is used
to formulate the value in the TTL column of the quarantined files list. When the
limit is reached, the TTL column displays EXP. and the file is deleted (although the
entry in the quarantined files list is maintained). Entering an age limit of 0 (zero)
means files are stored on disk indefinitely, depending on low disk space action.
Max filesize to
quarantine The maximum size of quarantined files in MB. Setting the maximum file size too
large may affect performance.
Low disk space Select the action to take when the local disk is full: overwrite the oldest file or drop
the newest file.
FortiAnalyzer Select to enable storage of blocked and quarantined files on a FortiAnalyzer unit.
See
“Log&Report” on page 647 for more information about configuring a
FortiAnalyzer unit.
Enable
AutoSubmit Enable AutoSubmit: enables the automatic submission feature. Select one or both
of the options below.
Use file pattern: Enables the automatic upload of files matching the file patterns in
the autoSubmit list.
Use file status: Enables the automatic upload of quarantined files based on their
status. Select either
Heuristics or Block Pattern .
Heuristics is configurable through the CLI only. See “Antivirus CLI configuration”
on page 453 .
Apply Select to save the configuration.