Fortinet FortiGate FortiGate-60M, Руководство администратора

Страница: 306 / 376

306
01-28007-0144-20041217 Fortinet Inc.
CLI configuration Antivirus
config antivirus service pop3
Use this command to configure how the FortiGate unit handles antivirus scanning of
large files in POP3 traffic and what ports the FortiGate unit scans for POP3.
Command syntax pattern
config antivirus service pop3
set <keyword> <variable>
end
config antivirus service pop3
unset <keyword>
end
get antivirus service [pop3]
show antivirus service [pop3]
How file size limits work
See “How file size limits work” on page 303 .
antivirus service pop3 command keywords and variables
Keywords and
variables Description Default Availability
memfilesizelimit
<MB_integer>
Set the maximum file size that can be
buffered to memory for virus scanning.
The maximum file size allowed is 10% of the
FortiGate RAM size. For example, a
FortiGate unit with 256 MB of RAM could
have a threshold range of 1 MB to 25 MB.
Note: For email scanning, the
memfilesizelimit refers to the final size of the
email after encoding by the email client,
including attachments. Email clients may
use a variety of encoding types and some
encoding types translate into larger file sizes
than the original attachment. The most
common encoding, base64, translates 3
bytes of binary data into 4 bytes of base64
data. So a file may be blocked or logged as
oversized even if the attachment is several
megabytes less than the memfilesizelimit.
10
(MB) All models.
port
<port_integer>
Configure antivirus scanning on a
nonstandard port number or multiple port
numbers for POP3. You can use ports from
the range 1-65535. You can add up to 20
ports.
110
All models.
uncompsizelimit
<MB_integer>
Set the maximum uncompressed file size
that can be buffered to memory for virus
scanning. Enter a value in megabytes
between 1 and the total memory size. Enter
0 for no limit (not recommended).
10
(MB) All models.