Fortinet FortiGate FortiGate-5020, Руководство администратора

Страница: 312 / 402

312
01-28008-0013-20050204 Fortinet Inc.
CLI configuration Antivirus
Command syntax pattern
config antivirus service ftp
set <keyword> <variable>
end
config antivirus service ftp
unset <keyword>
end
get antivirus service [ftp]
show antivirus service [ftp]
How file size limits work
See “How file size limits work” on page 311 .
antivirus service ftp command keywords and variables
Keywords and
variables Description Default Availability
memfilesizelimit
<MB_integer>
Set the maximum file size that can be
buffered to memory for virus scanning.
The maximum file size allowed is 10% of the
FortiGate RAM size. For example, a
FortiGate unit with 256 MB of RAM could
have a threshold range of 1 MB to 25 MB.
Oversized files can be passed or blocked in a
firewall protection profile.
Note: For email scanning, the
memfilesizelimit refers to the final size of the
email after encoding by the email client,
including attachments. Email clients may use
a variety of encoding types and some
encoding types translate into larger file sizes
than the original attachment. The most
common encoding, base64, translates 3
bytes of binary data into 4 bytes of base64
data. So a file may be blocked or logged as
oversized even if the attachment is several
megabytes less than the memfilesizelimit.
10
(MB) All models.
port
<port_integer>
Configure antivirus scanning on a
nonstandard port number or multiple port
numbers for FTP. You can use ports from the
range 1-65535. You can add up to 20 ports.
21
All models.
uncompsizelimit
<MB_integer>
Set the maximum uncompressed file size that
can be buffered to memory for virus scanning.
Enter a value in megabytes between 1 and
the total memory size. Enter 0 for no limit (not
recommended).
10
(MB) All models.