Config, 295 config – Fortinet 100A User Manual

Page 295

Advertising
background image

Antivirus

Config

FortiGate-100A Administration Guide

01-28007-0068-20041203

295

Config

Go to Config to set quarantine configuration options including whether to quarantine
blocked or infected files and from which service. You can also configure the time to
live and file size values, and enable AutoSubmit settings.

Figure 156:Quarantine configuration

Quarantine configuration has the following options:

Options

Quarantine Infected Files: Select the protocols from which to quarantine

infected files identified by antivirus scanning.
Quarantine Suspicious Files: Select the protocols from which to quarantine

suspicious files identified by heuristics.
Quarantine Blocked Files. Select the protocols from which to quarantine

blocked files identified by antivirus file blocking. The Quarantine Blocked

Files option is not available for HTTP or FTP because a file name is blocked

before downloading and cannot be quarantined.

Age limit

The time limit in hours for which to keep files in quarantine. The age limit is

used to formulate the value in the TTL column of the quarantined files list.

When the limit is reached the TTL column displays EXP. and the file is

deleted (although a record is maintained in the quarantined files list).

Entering an age limit of 0 (zero) means files are stored on disk indefinitely

depending on low disk space action.

Max filesize to
quarantine

The maximum size of quarantined files in MB. Setting the maximum file size

too large may affect performance.

Low disk space Select the action to take when the local disk is full: overwrite the oldest file or

drop the newest file.

Enable
AutoSubmit

Enable AutoSubmit: enables the AutoSubmit feature. Select one or both of

the options below.
Use file pattern: Enables the automatic upload of files matching the file

patterns in the AutoSubmit list.
Use file status: Enables the automatic upload of quarantined files based on

their status. Select either heuristics or block pattern.
Heuristics is configurable through the CLI only. See

“CLI configuration” on

page 299

.

Apply

Select Apply to save the configuration.

Advertising