Service Http - Fortinet FortiGate FortiGate-3600 Administration Manual

CLI configuration

service http

320
antivirus quarantine command keywords and variables
Keywords and variables
drop_heuristic
{ftp http imap pop3 smtp}
store_heuristic
{ftp http imap pop3 smtp}
Use this command to configure how the FortiGate unit handles antivirus scanning of
large files and what ports the FortiGate unit virus scans for HTTP traffic.
Note: This command has more keywords than are listed in this Guide. See the FortiGate CLI
Reference Guide for a complete list of commands and keywords.
Command syntax pattern
config antivirus service http
set <keyword> <variable>
end
config antivirus service http
unset <keyword>
end
get antivirus service [http]
show antivirus service [http]
Table 27: antivirus service http command keywords and variables
Keywords and variables
port <port_integer>
Example
This example shows how to add antivirus scanning for HTTP traffic on ports 70, 90,
and 443. Adding more ports for scanning does not erase the default, port 80. Use the
unset command to remove all ports from the list.
config antivirus service http
set port 70
set port 90
set port 443
end
01-28006-0011-20041105
Description
Do not quarantine files found by
heuristic scanning in traffic for the
specified protocols.
Quarantine files found by heuristic
scanning in traffic for the specified
protocols.
Description
Configure antivirus scanning on a
nonstandard port number or
multiple port numbers for HTTP.
You can use ports from the range
1-65535. You can add up to 20
ports.
Antivirus
Default Availability
FortiGate
imap
models
smtp
numbered
pop3
200 and
http
higher.
ftp
No FortiGate
default. models
numbered
200 and
higher.
Default Availability
80 All models.
Fortinet Inc.