Fortinet black logo

CLI Reference

Home FortiGate / FortiOS 6.0.0 CLI Reference

dlp settings

6.0.0
7.4.3
7.4.2
7.4.1
7.4.0
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.15
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.16
6.2.15
6.2.14
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.0.0
5.6.0
5.4.0
5.2.0
5.0.0
Copy Link
Copy Doc ID c287b6bf-a995-11e9-81a4-00505692583a:69155
Download PDF

dlp settings

Use this command to designate logical storage settings for the DLP fingerprinting database.

config dlp settings
    set storage-device {string}   Storage device name. size[35] - datasource(s): system.storage.name
    set size {integer}   Maximum total size of files within the storage (MB). range[16-4294967295]
    set db-mode {stop-adding | remove-modified-then-oldest | remove-oldest}   Behaviour when the maximum size is reached.
            stop-adding                  Stop adding entries.
            remove-modified-then-oldest  Remove modified chunks first, then oldest file entries.
            remove-oldest                Remove the oldest files first.
    set cache-mem-percent {integer}   Maximum percentage of available memory allocated to caching (1 - 15%). range[1-15]
    set chunk-size {integer}   Maximum fingerprint chunk size.  **Changing will flush the entire database**. range[100-100000]
end

Additional information

The following section is for those options that require additional explanation.

storage device <string>

Enter the storage device name, as configured under config system storage.

size <mb>

Enter the maximum total size of files in storage in MB. The default is set to 16.

db-mode {remove-modified-then-oldest | remove-oldest | stop-adding}

Select the method of maintaining the database size:

  • remove-modified-then-oldest: Remove oldest chunks first, and then remove oldest files.
  • remove-oldest: Remove oldest files first.
  • stop-adding: Don't remove files and stop adding to database (set by default).

cache-mem-percent <percentage>

Enter the maximum percentage of available memory allocated to caching. Set the range between 1-15. The default is set to 2.

chunk-size <bytes>

Maximum fingerprint chunk size in bytes.

Changing the chunk size will flush the entire database. Document source fingerprints will repopulate with the next scan. Only manually updated fingerprints will be lost. Set the range between 100-100000 (or 100 bytes to 100 KB). The default is set to 2800. Smaller chunks allow for greater precision, but at the cost of increased processing, database size, and lookups. Note that changing this value will flush the database.

Previous
Next

dlp settings

Use this command to designate logical storage settings for the DLP fingerprinting database.

config dlp settings
    set storage-device {string}   Storage device name. size[35] - datasource(s): system.storage.name
    set size {integer}   Maximum total size of files within the storage (MB). range[16-4294967295]
    set db-mode {stop-adding | remove-modified-then-oldest | remove-oldest}   Behaviour when the maximum size is reached.
            stop-adding                  Stop adding entries.
            remove-modified-then-oldest  Remove modified chunks first, then oldest file entries.
            remove-oldest                Remove the oldest files first.
    set cache-mem-percent {integer}   Maximum percentage of available memory allocated to caching (1 - 15%). range[1-15]
    set chunk-size {integer}   Maximum fingerprint chunk size.  **Changing will flush the entire database**. range[100-100000]
end

Additional information

The following section is for those options that require additional explanation.

storage device <string>

Enter the storage device name, as configured under config system storage.

size <mb>

Enter the maximum total size of files in storage in MB. The default is set to 16.

db-mode {remove-modified-then-oldest | remove-oldest | stop-adding}

Select the method of maintaining the database size:

  • remove-modified-then-oldest: Remove oldest chunks first, and then remove oldest files.
  • remove-oldest: Remove oldest files first.
  • stop-adding: Don't remove files and stop adding to database (set by default).

cache-mem-percent <percentage>

Enter the maximum percentage of available memory allocated to caching. Set the range between 1-15. The default is set to 2.

chunk-size <bytes>

Maximum fingerprint chunk size in bytes.

Changing the chunk size will flush the entire database. Document source fingerprints will repopulate with the next scan. Only manually updated fingerprints will be lost. Set the range between 100-100000 (or 100 bytes to 100 KB). The default is set to 2800. Smaller chunks allow for greater precision, but at the cost of increased processing, database size, and lookups. Note that changing this value will flush the database.

Previous
Next