Fortinet FortiGate FortiGate-5020, Руководство администратора

Страница: 308 / 402

308
01-28008-0013-20050204 Fortinet Inc.
CLI configuration Antivirus
system global optimize
The optimize feature configures CPU settings to ensure efficient operation of the
FortiGate unit for either antivirus scanning or straight throughput traffic. When
optimize is set to antivirus, the FortiGate unit uses symmetric multiprocessing to
spread the antivirus tasks to several CPUs, making scanning faster.
For more information see the Antivirus failopen and optimization Fortinet Knowledge
Center article.
Command syntax pattern
config system global
set <keyword> <variable>
end
config system global
unset <keyword>
end
get system global
show system global
Example
This example shows how to set the FortiGate unit to optimize operations for antivirus
scanning.
config system global
set optimize antivirus
end
config antivirus heuristic
The FortiGate heuristic antivirus engine performs tests on files to detect virus-like
behavior or known virus indicators. Heuristic scanning is performed last, after file
blocking and virus scanning have found no matches. In this way, heuristic scanning
may detect new viruses, but may also produce some false positive results.
The heuristic engine is enabled by default to pass suspected files to the recipient and
send a copy to quarantine. Once configured in the CLI, heuristic is enabled in a
protection profile when Virus Scan is enabled.
Use the heuristic command to change the heuristic scanning mode.
Command syntax pattern
config antivirus heuristic
set <keyword> <variable>
end
Keywords and variables Description Default Availability
optimize {antivirus |
throughput}
Optimize the firmware for
either antivirus performance
or throughput performance.
No default. All models.