Fortinet white logo
Fortinet white logo

CLI Reference

config security antivirus quarantine

config security antivirus quarantine

Use this command to configure anti-virus quarantine.

Syntax

config security antivirus quarantine

set destination {NULL | disk}

set agelimit <integer>

set maxfilesize <integer>

set quarantine-quota <integer>

set drop-infected {http | https | smtp}

set lowspace {drop-new | ovrw-old|

end

destination

The destination for quarantined files, which could be either of the following:

  • NULL—Disable quarantine.
  • Disk—Send quarantined files to the hard disk.
age-limit

The number of hours that quarantined files are kept on the hard disk. The default is 1 hour. Valid values range form 0 to 336 hours.

Note: If the age limit is set to 0 (zero), it means that there is no age limit and quarantined files will remain on the hard disk forever.

maxfilesize

The maximum size (in KB) of a single file that can be quarantined. The default is 1024 (KB). Valid values range from 1 to 2048 KB.

Note: Files larger than the set Max File Size will not be quarantined. In reality, this value is subject the available quarantine quota that remains on the hard disk. For example, when there is less than 1024 KB of quarantine quota (disk space reserved for quarantined files) remaining, a file of 1024 KB in size still will not be quarantined even though you've set Max File Size to 1024.

quarantine-quota

The amount of disk space reserved for quarantining files.

The default is 512 MB. Valid values range from 0 to 1024 MB. If the value is set to 0, no files are quarantined

drop-infected

Select either or both of the following:

  • HTTP
  • HTTPS
  • SMTP

Note: By default neither option is selected, which means that both types of files are quarantined. If selected, files involving the specified protocol or protocols will be dropped (not quarantined).

lowspace

Specify the way in which new files are handled when the system disk space is running low, which could be either of the following:

  • Override Old—Override old quarantine files with new ones.
  • Drop New—Drop new quarantine files to retain old ones.

Example

FortiADC-docs # config security antivirus quarantine

FortiADC-docs (quarantine) # set destination disk

FortiADC-docs (quarantine) # set agelimit 1

FortiADC-docs (quarantine) # set maxfilesize 1

FortiADC-docs (quarantine) # set quarantine-quota 256

FortiADC-docs (quarantine) # set drop-infected http

FortiADC-docs (quarantine) # set lowspace drop-new

FortiADC-docs (quarantine) # end

config security antivirus quarantine

config security antivirus quarantine

Use this command to configure anti-virus quarantine.

Syntax

config security antivirus quarantine

set destination {NULL | disk}

set agelimit <integer>

set maxfilesize <integer>

set quarantine-quota <integer>

set drop-infected {http | https | smtp}

set lowspace {drop-new | ovrw-old|

end

destination

The destination for quarantined files, which could be either of the following:

  • NULL—Disable quarantine.
  • Disk—Send quarantined files to the hard disk.
age-limit

The number of hours that quarantined files are kept on the hard disk. The default is 1 hour. Valid values range form 0 to 336 hours.

Note: If the age limit is set to 0 (zero), it means that there is no age limit and quarantined files will remain on the hard disk forever.

maxfilesize

The maximum size (in KB) of a single file that can be quarantined. The default is 1024 (KB). Valid values range from 1 to 2048 KB.

Note: Files larger than the set Max File Size will not be quarantined. In reality, this value is subject the available quarantine quota that remains on the hard disk. For example, when there is less than 1024 KB of quarantine quota (disk space reserved for quarantined files) remaining, a file of 1024 KB in size still will not be quarantined even though you've set Max File Size to 1024.

quarantine-quota

The amount of disk space reserved for quarantining files.

The default is 512 MB. Valid values range from 0 to 1024 MB. If the value is set to 0, no files are quarantined

drop-infected

Select either or both of the following:

  • HTTP
  • HTTPS
  • SMTP

Note: By default neither option is selected, which means that both types of files are quarantined. If selected, files involving the specified protocol or protocols will be dropped (not quarantined).

lowspace

Specify the way in which new files are handled when the system disk space is running low, which could be either of the following:

  • Override Old—Override old quarantine files with new ones.
  • Drop New—Drop new quarantine files to retain old ones.

Example

FortiADC-docs # config security antivirus quarantine

FortiADC-docs (quarantine) # set destination disk

FortiADC-docs (quarantine) # set agelimit 1

FortiADC-docs (quarantine) # set maxfilesize 1

FortiADC-docs (quarantine) # set quarantine-quota 256

FortiADC-docs (quarantine) # set drop-infected http

FortiADC-docs (quarantine) # set lowspace drop-new

FortiADC-docs (quarantine) # end