3.4. ALG
This is a category that groups the following object types.
3.4.1. ALG_FTP
Description
Use an FTP Application Layer Gateway to manage FTP traffic through the system.
Properties
Name
Specifies a symbolic name for the ALG. (Identifier)
AllowServerPassive
Allow server to use passive mode (unsafe for server). (Default:
No)
ServerPorts
Server data ports. (Default: 1024-65535)
AllowClientActive
Allow client to use active mode (unsafe for client). (Default:
No)
ClientPorts
Client data ports. (Default: 1024-65535)
AllowUnknownCommands
Allow unknown commands. (Default: No)
AllowSITEEXEC
Allow SITE EXEC. (Default: No)
MaxLineLength
Maximum line length in control channel. (Default: 256)
MaxCommandRate
Maximum number of commands per second. (Default: 20)
Allow8BitStrings
Allow 8-bit strings in control channel. (Default: Yes)
AllowResumeTransfer
Allow RESUME even in case of content scanning. (Default:
No)
Antivirus
Disabled, Audit or Protect. (Default: Disabled)
ScanExclude
List of files to exclude from antivirus scanning. (Optional)
CompressionRatio
A compression ratio higher than this value will trigger the ac-
tion in Compression Ratio Action, a value of zero will disable
all compression checks. (Default: 20)
CompressionRatioAction
The action to take when high compression threshold is viol-
ated, all actions are logged. (Default: Drop)
AllowEncryptedZip
Allow encrypted zip files, even though the contents can not be
scanned. (Default: No)
ZDEnabled
Enable ZoneDefense Block. (Default: No)
ZDNetwork
Hosts within this network will be blocked at switches if a virus
is found.
FileListType
Specifies if the file list contains files to allow or deny. (Default:
Block)
FailModeBehavior
Standard behaviour on error: Allow or Deny. (Default: Deny)
3.4. ALG Chapter 3. Configuration Reference
91
To Next Page
Loading...
