Fortinet FortiGate 1000A, Руководство администратора

Страница: 312 / 412

312
01-28011-0254-20051115 Fortinet Inc.
Quarantine Antivirus
AutoSubmit list
You can configure the FortiGate unit to automatically upload suspicious files to
Fortinet for analysis. You can add file patterns to the AutoSubmit list using wildcard
characters (* or ?). File patterns are applied for AutoSubmit regardless of file blocking
settings.
You can also upload files to Fortinet based on status (blocked or heuristics) or submit
individual files directly from the quarantined files list. The FortiGate unit uses
encrypted email to autosubmit files to an SMTP server through port 25.
Figure 161:Sample AutoSubmit list
AutoSubmit list options
AutoSubmit list has the following icons and features:
Configuring the AutoSubmit list
To add a file pattern to the AutoSubmit list
1 Go to Anti-Virus > Quarantine > AutoSubmit .
2 Select Create New.
Figure 162:Adding a file pattern
3 Enter the file pattern or file name you want to automatically upload to Fortinet for
analysis.
The Download icon. Download the corresponding file in its original format.
The Submit icon. Upload a suspicious file to Fortinet for analysis.
Note: Duplicates of files (based on the checksum) are not stored, only counted. The TTL value
and the duplicate count are updated each time a duplicate of a file is found.
Create New Select Create New to add a new file pattern to the AutoSubmit list.
File Pattern The current list of file patterns that will be automatically uploaded. You can
create a pattern by using ? or * wildcard characters. Enable the check box
to enable all file patterns in the list.
The Delete and Edit/View icons.