Antivirus Cli Configuration - Fortinet FortiGate Series Administration Manual

Antivirus CLI configuration

Antivirus CLI configuration
system global optimize
config antivirus heuristic
528
Figure 313: Virus database information
Usually the FortiGuard AV definitions are updated automatically from the FortiGuard
Distribution Network (FDN). Go to System > Maintenance > FortiGuard to configure
automatic antivirus definition updates from the FDN.
You can also update the antivirus definitions manually from the system dashboard (go to
System > Status).
This section describes the CLI commands that extend features available through the web-
based manager. For complete descriptions and examples of how to enable additional
features through CLI commands, see the
The optimize feature configures CPU settings to ensure efficient operation of the FortiGate
unit for either antivirus scanning or straight throughput traffic. When optimize is set to
antivirus, the FortiGate unit uses symmetric multiprocessing to spread the antivirus tasks
to several CPUs, making scanning faster.
This feature is available on models numbered 1000 and higher.
For more information, see the
Center article.
The FortiGate heuristic antivirus engine performs tests on files to detect virus-like
behavior or known virus indicators. Heuristic scanning is performed last, after file blocking
and virus scanning have found no matches. In this way, heuristic scanning may detect
new viruses, but may also produce some false positive results.
The heuristic engine is disabled by default. You need to enable it to pass suspected files to
the recipient and send a copy to the file quarantine. Once enabled in the CLI, heuristic
scanning is enabled in a protection profile when Virus Scan is enabled.
Use the heuristic command to change the heuristic scanning mode.
FortiGate CLI
Antivirus failopen and optimization
FortiGate Version 4.0 MR1 Administration Guide
Reference.
Fortinet Knowledge
01-410-89802-20090903
http://docs.fortinet.com/
AntiVirus
• Feedback