Antivirus settings and controls AntiVirus
FortiGate Version 4.0 MR1 Administration Guide
520 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Note: If virtual domains are enabled, you configure antivirus file filtering and antivirus
settings in protection profiles separately for each virtual domain. Antivirus file quarantine
and grayware settings are part of the global configuration.
Table 47: Antivirus and Protection Profile antivirus configuration
Protection Profile antivirus options Antivirus setting
Virus Scan UTM > AntiVirus > Virus Database
Enable or disable virus scanning for each
supported protocol: HTTP, FTP, IMAP, POP3,
SMTP, IM. If your FortiGate unit supports SSL
content scanning and inspection you can also
enable virus scanning for HTTPS, IMAPS,
POP3S, and SMTPS.
View a read-only list of current viruses.
File Filter UTM > AntiVirus > File Filter
Enable or disable file pattern and file type
handling for each protocol.
Configure file patterns and types to block or allow
files. Patterns and types can also be individually
enabled or disabled.
Quarantine UTM > AntiVirus > Quarantined Files
Enable or disable quarantining for each
protocol. File Quarantine is only available on
units with a local disk, or with a configured
FortiAnalyzer unit.
View and sort the list of quarantined files,
configure file patterns to upload automatically to
Fortinet for analysis, and configure quarantining
options in AntiVirus.
Pass fragmented email messages.
Enable or disable passing fragmented email
messages. Fragmented email messages
cannot be scanned for viruses.
Comfort Clients
Enable or disable for HTTP and FTP traffic
(and HTTPS traffic if your FortiGate unit
supports SSL content scanning and
inspection and HTTPS content filtering mode
is set to Deep Scan in the protocol recognition
part of the protection profile). Set the interval
and byte amount to trigger client comforting.
Oversized file/email
Configure the FortiGate unit to block or pass
oversized files and email messages for each
protocol. Set the size thresholds for files and
email messages for each protocol in
AntiVirus.
UTM > AntiVirus > Grayware
Enable or disable blocking of Grayware by
category.
Add signature to outgoing email messages
Create and enable a signature to append to
outgoing email messages (SMTP only).