Fortinet black logo

CLI Reference

firewall profile-group

firewall profile-group

Use this command to create profile groups. A profile group can contain an antivirus profile, IPS sensor, web filter profile, email filter profile, DLP sensor, application control list, a VoIP profile, an MMS profile and a replacement message group. You can use a profile group in a firewall policy if you set the firewall policy profile-type field to group.

config firewall profile-group
    edit {name}
    # Configure profile groups.
        set name {string}   Profile group name. size[35]
        set av-profile {string}   Name of an existing Antivirus profile. size[35] - datasource(s): antivirus.profile.name
        set webfilter-profile {string}   Name of an existing Web filter profile. size[35] - datasource(s): webfilter.profile.name
        set dnsfilter-profile {string}   Name of an existing DNS filter profile. size[35] - datasource(s): dnsfilter.profile.name
        set spamfilter-profile {string}   Name of an existing Spam filter profile. size[35] - datasource(s): spamfilter.profile.name
        set dlp-sensor {string}   Name of an existing DLP sensor. size[35] - datasource(s): dlp.sensor.name
        set ips-sensor {string}   Name of an existing IPS sensor. size[35] - datasource(s): ips.sensor.name
        set application-list {string}   Name of an existing Application list. size[35] - datasource(s): application.list.name
        set voip-profile {string}   Name of an existing VoIP profile. size[35] - datasource(s): voip.profile.name
        set icap-profile {string}   Name of an existing ICAP profile. size[35] - datasource(s): icap.profile.name
        set waf-profile {string}   Name of an existing Web application firewall profile. size[35] - datasource(s): waf.profile.name
        set ssh-filter-profile {string}   Name of an existing SSH filter profile. size[35] - datasource(s): ssh-filter.profile.name
        set profile-protocol-options {string}   Name of an existing Protocol options profile. size[35] - datasource(s): firewall.profile-protocol-options.name
        set ssl-ssh-profile {string}   Name of an existing SSL SSH profile. size[35] - datasource(s): firewall.ssl-ssh-profile.name
    next
end

Additional information

The following section is for those options that require additional explanation.

firewall profile-group

Use this command to create profile groups. A profile group can contain an antivirus profile, IPS sensor, web filter profile, email filter profile, DLP sensor, application control list, a VoIP profile, an MMS profile and a replacement message group. You can use a profile group in a firewall policy if you set the firewall policy profile-type field to group.

config firewall profile-group
    edit {name}
    # Configure profile groups.
        set name {string}   Profile group name. size[35]
        set av-profile {string}   Name of an existing Antivirus profile. size[35] - datasource(s): antivirus.profile.name
        set webfilter-profile {string}   Name of an existing Web filter profile. size[35] - datasource(s): webfilter.profile.name
        set dnsfilter-profile {string}   Name of an existing DNS filter profile. size[35] - datasource(s): dnsfilter.profile.name
        set spamfilter-profile {string}   Name of an existing Spam filter profile. size[35] - datasource(s): spamfilter.profile.name
        set dlp-sensor {string}   Name of an existing DLP sensor. size[35] - datasource(s): dlp.sensor.name
        set ips-sensor {string}   Name of an existing IPS sensor. size[35] - datasource(s): ips.sensor.name
        set application-list {string}   Name of an existing Application list. size[35] - datasource(s): application.list.name
        set voip-profile {string}   Name of an existing VoIP profile. size[35] - datasource(s): voip.profile.name
        set icap-profile {string}   Name of an existing ICAP profile. size[35] - datasource(s): icap.profile.name
        set waf-profile {string}   Name of an existing Web application firewall profile. size[35] - datasource(s): waf.profile.name
        set ssh-filter-profile {string}   Name of an existing SSH filter profile. size[35] - datasource(s): ssh-filter.profile.name
        set profile-protocol-options {string}   Name of an existing Protocol options profile. size[35] - datasource(s): firewall.profile-protocol-options.name
        set ssl-ssh-profile {string}   Name of an existing SSL SSH profile. size[35] - datasource(s): firewall.ssl-ssh-profile.name
    next
end

Additional information

The following section is for those options that require additional explanation.