Fortinet Gate 60D, Administration Manual

Page: 449 / 706

AntiVirus File Quarantine
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
449
http://docs.fortinet.com/ • Feedback
Configuring the AutoSubmit list
To add a file pattern to the AutoSubmit list, go to UTM > AntiVirus > AutoSubmit . Note that
the autosubmit feature is available only if your FortiGate unit has a local hard disk.
Figure 283: New File Pattern dialog box
Configuring quarantine options
Go to UTM > AntiVirus > Config to set quarantine configuration options, such as whether
to quarantine blocked or infected files and from which service.
You can configure quarantine options for HTTP, FTP, IMAP, POP3, SMTP, IM, and NNTP
Traffic. If your FortiGate unit supports SSL content scanning and inspection you can also
quarantine blocked and infected files from HTTPS, IMAPS, POP3S, and SMTPS traffic.
To enable HTTPS quarantine you must set
HTTPS Content Filtering Mode to Deep Scan
in the Protocol Recognition part of the protection profile. For more information, see “SSL
content scanning and inspection” on page 399 .
Figure 284: Quarantine Configuration (quarantine to FortiAnalyzer unit)
File Pattern Enter the file pattern or file name to be upload automatically to Fortinet.
Enable Select to enable the file pattern
Note: To enable automatic uploading of the configured file patterns, go to AntiVirus > File
Quarantine > Config , select Enable AutoSubmit , and select Use File Pattern .