Cli Configuration; System Global Av_Failopen - Fortinet FortiGate FortiGate-5001 Administration Manual

Antivirus

CLI configuration

system global av_failopen

FortiGate-5000 series Administration Guide
Note: This guide only covers Command Line Interface (CLI) commands that are not
represented in the web-based manager. For complete descriptions and examples of how to use
CLI commands see the FortiGate CLI Reference Guide.
Antivirus failopen is a safeguard feature that determines the behavior of the FortiGate
antivirus system if it becomes overloaded in high traffic.
The antivirus system operates in one of two modes, depending on available memory.
If the free memory is greater than 30% of the total memory then the system is in
nonconserve mode. If the free memory drops to less than 20% of the total memory,
then the system enters conserve mode. When the free memory once again reaches
30% or greater of the total memory, the system returns to nonconserve mode.
For more information see the Antivirus failopen and optimization Fortinet Knowledge
Center article.
Command syntax pattern
config system global
set <keyword> <variable>
end
config system global
unset <keyword>
end
get system global
show system global
Keywords and variables
av_failopen
{off | one-shot |
pass}
Example
This example shows how to set av_failopen to use one-shot and bypass the antivirus
system when memory is low.
config system global
set av_failopen one-shot
end
01-28008-0013-20050204
Description
Set the action to take if there
is an overload of the antivirus
system.
Enter pass to bypass the
antivirus system when
memory is low. Antivirus
scanning resumes when low
memory condition is resolved.
Enter one-shot to bypass
the antivirus system when
memory is low. You must
enter off or pass to restart
antivirus scanning.
CLI configuration
Default Availability
off Models
numbered
3000 and
higher.
307