Replacement messages System Config
FortiGate Version 4.0 MR1 Administration Guide
256 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
NNTP replacement messages
The FortiGate unit sends the NNTP replacement messages listed in Table 32 to NNTP
clients when an event occurs such as antivirus blocking a file attached to an NNTP
message that contains a virus. NNTP replacement messages are text messages.
Alert Mail replacement messages
The FortiGate unit adds the alert mail replacement messages listed in Table 33 to alert
email messages sent to administrators. For more information about alert email, see
“Configuring Alert Email” on page 715. Alert mail replacement messages are text
messages.
Blocked
message
Antivirus File Filter enabled for FTP in a protection profile blocks a file being
downloaded using FTP that matches an entry in the selected file filter list and
sends this message to the FTP client.
Oversized
message
Antivirus Oversized File/Email set to Block for FTP in a protection profile blocks
an oversize file from being downloaded using FTP and sends this message to
the FTP client.
DLP message In a DLP sensor, a rule with action set to Block replaces a blocked FTP
download with this message.
DLP ban
message
In a DLP sensor, a rule with action set to Ban blocks an FTP session and
displays this message. This message is displayed whenever the banned user
attempts to access until the user is removed from the banned user list.
Table 31: FTP replacement messages
Message name Description
Table 32: FTP replacement messages
Message name Description
Virus message Antivirus Virus Scan enabled for NTTP in a protection profile deletes an infected
file attached to an NNTP message and sends this message to the FTP client.
Blocked
message
Antivirus File Filter enabled for NNTP in a protection profile blocks a file attached
to an NNTP message that matches an entry in the selected file filter list and
sends this message to the FTP client.
Oversized
message
Antivirus Oversized File/Email set to Block for NNTP in a protection profile
removes an oversized file from an NNTP message and replaces the file with this
message.
Data Leak
prevention
message
In a DLP sensor, a rule with action set to Block replaces a blocked NNTP
message with this message.
Subject of data
leak prevention
message
This message is added to the subject field of all NNTP messages replaced by
the DLP sensor Block, Ban, Quarantine IP address, and Quarantine interface
actions.
Banned by data
leak prevention
message
In a DLP sensor, a rule with action set to Ban replaces a blocked NNTP
message with this message. This message also replaces any additional NNTP
messages that the banned user sends until they are removed from the banned
user list.
Table 33: Alert mail replacement messages
Message name Description
Virus message Virus detected must be enabled for alert email. Antivirus Virus Scan must be
enabled in a protection profile and detect a virus.
If you enable Send alert email for logs based on severity for alert email, whether or not
replacement messages are sent by alert email depends on how you set the alert email Minimum
log level.