Fortinet Fortigate-5000 series - Antivirus settings and controls

AntiVirus Antivirus settings and controls
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 337
Antivirus settings and controls
While antivirus settings are configured for system-wide use, specific settings can
be implemented on a per profile basis. Table 34 compares antivirus options in
protection profiles and the antivirus menu.
Table 34: Antivirus and Protection Profile antivirus configuration
Protection Profile antivirus options Antivirus setting
Virus Scan AntiVirus > Config > Virus List
Enable or disable virus scanning for each
protocol (HTTP, FTP, IMAP, POP3, SMTP,
IM).
View a read-only list of current viruses.
File Pattern AntiVirus > File Pattern
Enable or disable file pattern handling for
each protocol.
Configure file patterns to block or allow
files. Patterns can also be individually
enabled or disabled.
Quarantine AntiVirus > Quarantine
Enable or disable quarantining for each
protocol. Quarantine is only available on units
with a local disk, or with a configured
FortiAnalyzer unit.
View and sort the list of quarantined files,
configure file patterns to upload
automatically to Fortinet for analysis, and
configure quarantining options in
AntiVirus.
Pass fragmented email messages
Enable or disable passing fragmented email
messages. Fragmented email messages
cannot be scanned for viruses.
Comfort Clients
Enable or disable for HTTP and FTP traffic.
Set the interval and byte amount to trigger
client comforting.
Oversized file/email
Configure the FortiGate unit to block or pass
oversized files and email messages for each
protocol. Set the size thresholds for files and
email messages for each protocol in
AntiVirus.
AntiVirus > Config > Grayware
Enable or disable blocking of Grayware
by category.
Add signature to outgoing email messages
Create and enable a signature to append to
outgoing email messages (SMTP only).