Fortinet FortiGate FortiGate-60M Administration Manual page 226

Protection profile
226
Configuring antivirus options
Figure 107:Protection profile antivirus options
The following options are available for antivirus through the protection profile. See
"Antivirus" on page 291
Virus Scan
File Block
Quarantine (models with
local disk only)
Pass fragmented emails Enable or disable passing fragmented email for mail protocols
Oversized file/email
Add signature to
outgoing emails
01-28007-0144-20041217
for more antivirus configuration options.
Enable or disable virus scanning (for viruses and worms) for each
protocol (HTTP, FTP, IMAP, POP3, SMTP). Grayware, if enabled in
Antivirus > Config > Config, is included with the Virus Scan.
Heuristic, if enabled in the CLI, is also included with the Virus Scan.
Enable or disable file pattern blocking for each protocol. You can
block files by name, by extension, or any other pattern, giving you
the flexibility to block files that may contain harmful content.
Enable or disable quarantining for each protocol. You can
quarantine suspect files to view them or submit files to Fortinet for
analysis.
(IMAP, POP3, SMTP). Fragmented email cannot be scanned for
viruses.
Select block or pass for files and email that exceed configured
thresholds for each protocol. To configure the oversized file
threshold, go to Antivirus > Config > Config. The maximum
threshold for scanning in memory is 10% of the FortiGate unit RAM.
Note: For email scanning, the oversize threshold refers to the final
size of the email after encoding by the email client, including
attachments. Email clients may use a variety of encoding types and
some encoding types translate into larger file sizes than the original
attachment. The most common encoding, base64, translates 3
bytes of binary data into 4 bytes of base64 data. So a file may be
blocked or logged as oversized even if the attachment is several
megabytes less than the configured oversize threshold.
Create and enable a signature to append to outgoing email (SMTP
only).
Firewall
Fortinet Inc.