Config - Fortinet FortiGate FortiGate-500 Administration Manual

Antivirus

Config

FortiGate-500 Administration Guide
Go to Config to set quarantine configuration options including whether to quarantine
blocked or infected files and from which service. You can also configure the time to
live and file size values, and enable AutoSubmit settings.
Figure 155:Quarantine configuration
Quarantine configuration has the following options:
Options Quarantine Infected Files: Select the protocols from which to quarantine
infected files identified by antivirus scanning.
Quarantine Suspicious Files: Select the protocols from which to quarantine
suspicious files identified by heuristics.
Quarantine Blocked Files. Select the protocols from which to quarantine
blocked files identified by antivirus file blocking. The Quarantine Blocked
Files option is not available for HTTP or FTP because a file name is blocked
before downloading and cannot be quarantined.
Age limit The time limit in hours for which to keep files in quarantine. The age limit is
used to formulate the value in the TTL column of the quarantined files list.
When the limit is reached the TTL column displays EXP. and the file is
deleted (although a record is maintained in the quarantined files list).
Entering an age limit of 0 (zero) means files are stored on disk indefinitely
depending on low disk space action.
Max filesize to The maximum size of quarantined files in MB. Setting the maximum file size
too large may affect performance.
quarantine
Low disk space Select the action to take when the local disk is full: overwrite the oldest file or
drop the newest file.
Enable Enable AutoSubmit: enables the AutoSubmit feature. Select one or both of
the options below.
AutoSubmit
Use file pattern: Enables the automatic upload of files matching the file
patterns in the AutoSubmit list.
Use file status: Enables the automatic upload of quarantined files based on
their status. Select either heuristics or block pattern.
Heuristics is configurable through the CLI only. See
page 316.
Apply Select Apply to save the configuration.
01-28006-0007-20041105
Quarantine
"CLI configuration" on
313