Fortinet FortiGate FortiGate-5001 Administration Manual page 317

Antivirus
FortiGate-5000 series Administration Guide
antivirus service smtp command keywords and variables
Keywords and Description
variables
Set the maximum file size that can be
memfilesizelimit
buffered to memory for virus scanning.
<MB_integer>
The maximum file size allowed is 10% of the
FortiGate RAM size. For example, a
FortiGate unit with 256 MB of RAM could
have a threshold range of 1 MB to 25 MB.
Note: For email scanning, the
memfilesizelimit refers to the final size of the
email after encoding by the email client,
including attachments. Email clients may use
a variety of encoding types and some
encoding types translate into larger file sizes
than the original attachment. The most
common encoding, base64, translates 3
bytes of binary data into 4 bytes of base64
data. So a file may be blocked or logged as
oversized even if the attachment is several
megabytes less than the memfilesizelimit.
Configure antivirus scanning on a
port
nonstandard port number or multiple port
<port_integer>
numbers for SMTP. You can use ports from
the range 1-65535. You can add up to 20
ports.
Set the maximum uncompressed file size
uncompsizelimit
that can be buffered to memory for virus
<MB_integer>
scanning. Enter a value in megabytes
between 1 and the total memory size. Enter
0 for no limit (not recommended).
How file size limits work
See "How file size limits work" on page
Example
This example shows how to set the maximum file size that can be buffered to memory
for scanning at 100 MB, the maximum uncompressed file size that can be buffered to
memory for scanning at 1 GB (1000 MB), and how to enable antivirus scanning on
ports 25, and 465 for SMTP traffic.
config antivirus service smtp
set memfilesizelimit 100
set uncompsizelimit 1000
set port 25
set port 465
end
This example shows how to display the antivirus SMTP traffic settings.
get antivirus service smtp
This example shows how to display the configuration for antivirus SMTP traffic.
show antivirus service smtp
01-28008-0013-20050204
311.
CLI configuration
Default Availability
10 (MB) All models.
All models.
143
10 (MB) All models.
317