Fortinet FortiGate FortiGate-5020, Руководство администратора

Страница: 315 / 402

Antivirus CLI configuration
FortiGate-5000 series Administration Guide 01-28008-0013-20050204
315
config antivirus service imap
Use this command to configure how the FortiGate unit handles antivirus scanning of
large files in IMAP traffic and what ports the FortiGate unit scans for IMAP.
Command syntax pattern
config antivirus service imap
set <keyword> <variable>
end
config antivirus service imap
unset <keyword>
end
get antivirus service [imap]
show antivirus service [imap]
How file size limits work
See “How file size limits work” on page 311 .
antivirus service imap command keywords and variables
Keywords and
variables Description Default Availability
memfilesizelimit
<MB_integer>
Set the maximum file size that can be buffered
to memory for virus scanning.
The maximum file size allowed is 10% of the
FortiGate RAM size. For example, a FortiGate
unit with 256 MB of RAM could have a
threshold range of 1 MB to 25 MB.
Note: For email scanning, the memfilesizelimit
refers to the final size of the email after
encoding by the email client, including
attachments. Email clients may use a variety
of encoding types and some encoding types
translate into larger file sizes than the original
attachment. The most common encoding,
base64, translates 3 bytes of binary data into
4 bytes of base64 data. So a file may be
blocked or logged as oversized even if the
attachment is several megabytes less than the
memfilesizelimit.
10
(MB) All models.
port
<port_integer>
Configure antivirus scanning on a
nonstandard port number or multiple port
numbers for IMAP. You can use ports from the
range 1-65535. You can add up to 20 ports.
143
All models.
uncompsizelimit
<MB_integer>
Set the maximum uncompressed file size that
can be buffered to memory for virus scanning.
Enter a value in megabytes between 1 and the
total memory size. Enter 0 for no limit (not
recommended).
10
(MB) All models.