Fortinet black logo

CLI Reference

antivirus heuristic

antivirus heuristic

Configure the global heuristic options used for antivirus scanning in binary files.

config antivirus heuristic
    set mode {pass | block | disable}   Enable/disable heuristics and determine how the system behaves if heuristics detects a problem.
            pass     Enable heuristics but detected files are passed. If enabled, the system will record a log message.
            block    Enable heuristics and detected files are blocked. If enabled, the system will record a log message.
            disable  Turn off heuristics.
end

Additional information

The following section is for those options that require additional explanation.

mode {pass | block | default}

Determine the action to take when heuristics detects a problem:

  • pass: Enables heuristic scanning, but passes detected files to the recipient. Suspicious files are quarantined if quarantine is enabled.
  • block: Enables heuristic scanning and blocks detected files. A replacement message is forwarded to the recipient. Blocked files are quarantined if quarantine is enabled.
  • disable: Disables heuristic scanning (set by default).

antivirus heuristic

Configure the global heuristic options used for antivirus scanning in binary files.

config antivirus heuristic
    set mode {pass | block | disable}   Enable/disable heuristics and determine how the system behaves if heuristics detects a problem.
            pass     Enable heuristics but detected files are passed. If enabled, the system will record a log message.
            block    Enable heuristics and detected files are blocked. If enabled, the system will record a log message.
            disable  Turn off heuristics.
end

Additional information

The following section is for those options that require additional explanation.

mode {pass | block | default}

Determine the action to take when heuristics detects a problem:

  • pass: Enables heuristic scanning, but passes detected files to the recipient. Suspicious files are quarantined if quarantine is enabled.
  • block: Enables heuristic scanning and blocks detected files. A replacement message is forwarded to the recipient. Blocked files are quarantined if quarantine is enabled.
  • disable: Disables heuristic scanning (set by default).