Config Antivirus Service Ftp - Fortinet FortiGate FortiGate-5001 Administration Manual

Fortigate 5000 series
Hide thumbs Also See for FortiGate FortiGate-5001:
Table of Contents

Advertisement

Antivirus

config antivirus service ftp

FortiGate-5000 series Administration Guide
antivirus service http command keywords and variables
Keywords and
variables
port
<port_integer>
uncompsizelimit
<MB_integer>
How file size limits work
The memfilesizelimit is applied first to all incoming files, compressed or
uncompressed. If the file is larger than the limit the file is passed or blocked according
to the user configuration in the firewall profile.
The uncompsizelimit applies to the uncompressed size of the file. If other files are
included within the file, the uncompressed size of each one is checked against the
uncompsizelimit value. If any one of the uncompressed files is larger than the
limit, the file is passed without scanning, but the total size of all uncompressed files
within the original file can be greater than the uncompsizelimit.
Example
This example shows how to set the maximum file size that can be buffered to memory
for scanning at 12 MB, the maximum uncompressed file size that can be buffered to
memory for scanning at 15 MB, and how to enable antivirus scanning on ports 70, 80,
and 443 for HTTP traffic.
config antivirus service http
set memfilesizelimit 12
set uncompsizelimit 15
set port 70
set port 80
set port 443
end
This example shows how to display the antivirus HTTP traffic settings.
get antivirus service http
This example shows how to display the configuration for antivirus HTTP traffic.
show antivirus service http
Use this command to configure how the FortiGate unit handles antivirus scanning of
large files in FTP traffic and how the FortiGate unit handles the buffering and
uploading of files to an FTP server.
01-28008-0013-20050204
Description
Configure antivirus scanning on a
nonstandard port number or multiple port
numbers for HTTP. You can use ports from
the range 1-65535. You can add up to 20
ports.
Set the maximum uncompressed file size
that can be buffered to memory for virus
scanning. Enter a value in megabytes
between 1 and the total memory size. Enter
0 for no limit (not recommended).
CLI configuration
Default
Availability
All models.
80
10 (MB)
All models.
311

Advertisement

Table of Contents
loading

Table of Contents