config firewall profile-protocol-options
Configure protocol options.
config firewall profile-protocol-options
Description: Configure protocol options.
edit <name>
config cifs
Description: Configure CIFS protocol options.
set ports {integer}
set server-credential-type [none|credential-replication|...]
config server-keytab
Description: Server keytab.
edit <principal>
set keytab {string}
next
end
set status [enable|disable]
end
set comment {var-string}
config dns
Description: Configure DNS protocol options.
set ports {integer}
set status [enable|disable]
end
config ftp
Description: Configure FTP protocol options.
set comfort-amount {integer}
set comfort-interval {integer}
set inspect-all [enable|disable]
set options {option1}, {option2}, ...
set oversize-limit {integer}
set ports {integer}
set scan-bzip2 [enable|disable]
set ssl-offloaded [no|yes]
set status [enable|disable]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
config http
Description: Configure HTTP protocol options.
set block-page-status-code {integer}
set comfort-amount {integer}
set comfort-interval {integer}
set fortinet-bar [enable|disable]
set fortinet-bar-port {integer}
set inspect-all [enable|disable]
set options {option1}, {option2}, ...
set oversize-limit {integer}
set ports {integer}
set post-lang {option1}, {option2}, ...
set range-block [disable|enable]
set retry-count {integer}
set scan-bzip2 [enable|disable]
set ssl-offloaded [no|yes]
set status [enable|disable]
set stream-based-uncompressed-limit {integer}
set streaming-content-bypass [enable|disable]
set strip-x-forwarded-for [disable|enable]
set switching-protocols [bypass|block]
set tcp-window-maximum {integer}
set tcp-window-minimum {integer}
set tcp-window-size {integer}
set tcp-window-type [system|static|...]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
config imap
Description: Configure IMAP protocol options.
set inspect-all [enable|disable]
set options {option1}, {option2}, ...
set oversize-limit {integer}
set ports {integer}
set scan-bzip2 [enable|disable]
set ssl-offloaded [no|yes]
set status [enable|disable]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
config mail-signature
Description: Configure Mail signature.
set signature {string}
set status [disable|enable]
end
config mapi
Description: Configure MAPI protocol options.
set options {option1}, {option2}, ...
set oversize-limit {integer}
set ports {integer}
set scan-bzip2 [enable|disable]
set status [enable|disable]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
config nntp
Description: Configure NNTP protocol options.
set inspect-all [enable|disable]
set options {option1}, {option2}, ...
set oversize-limit {integer}
set ports {integer}
set scan-bzip2 [enable|disable]
set status [enable|disable]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
set oversize-log [disable|enable]
config pop3
Description: Configure POP3 protocol options.
set inspect-all [enable|disable]
set options {option1}, {option2}, ...
set oversize-limit {integer}
set ports {integer}
set scan-bzip2 [enable|disable]
set ssl-offloaded [no|yes]
set status [enable|disable]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
set replacemsg-group {string}
set rpc-over-http [enable|disable]
config smtp
Description: Configure SMTP protocol options.
set inspect-all [enable|disable]
set options {option1}, {option2}, ...
set oversize-limit {integer}
set ports {integer}
set scan-bzip2 [enable|disable]
set server-busy [enable|disable]
set ssl-offloaded [no|yes]
set status [enable|disable]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
config ssh
Description: Configure SFTP and SCP protocol options.
set comfort-amount {integer}
set comfort-interval {integer}
set options {option1}, {option2}, ...
set oversize-limit {integer}
set scan-bzip2 [enable|disable]
set uncompressed-nest-limit {integer}
set uncompressed-oversize-limit {integer}
end
set switching-protocols-log [disable|enable]
next
end
config firewall profile-protocol-options
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
comment |
Optional comments. |
var-string |
Maximum length: 255 |
|||||||
|
name |
Name. |
string |
Maximum length: 35 |
|||||||
|
oversize-log |
Enable/disable logging for antivirus oversize file blocking. |
option |
- |
|||||||
|
|
|
|||||||||
|
replacemsg-group |
Name of the replacement message group to be used |
string |
Maximum length: 35 |
|||||||
|
rpc-over-http |
Enable/disable inspection of RPC over HTTP. |
option |
- |
|||||||
|
|
|
|||||||||
|
switching-protocols-log |
Enable/disable logging for HTTP/HTTPS switching protocols. |
option |
- |
|||||||
|
|
|
|||||||||
config cifs
|
Parameter |
Description |
Type |
Size |
|||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
ports |
Ports to scan for content (1 - 65535, default = 445). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||
|
server-credential-type |
CIFS server credential type. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||||
|
|
|
|||||||||||
config server-keytab
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
keytab |
Base64 encoded keytab file containing credential of the server. |
string |
Maximum length: 8191 |
|
principal |
Service principal. For example, "host/cifsserver.example.com@example.com". |
string |
Maximum length: 511 |
config dns
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
ports |
Ports to scan for content (1 - 65535, default = 53). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||
|
|
|
|||||||||
config ftp
|
Parameter |
Description |
Type |
Size |
|||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
comfort-amount |
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||||||
|
comfort-interval |
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10). |
integer |
Minimum value: 1 Maximum value: 900 |
|||||||||||||
|
inspect-all |
Enable/disable the inspection of all ports for the protocol. |
option |
- |
|||||||||||||
|
|
|
|||||||||||||||
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||||||||
|
|
|
|||||||||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||||||||
|
ports |
Ports to scan for content (1 - 65535, default = 21). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||||||||
|
|
|
|||||||||||||||
|
ssl-offloaded |
SSL decryption and encryption performed by an external device. |
option |
- |
|||||||||||||
|
|
|
|||||||||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||||||||
|
|
|
|||||||||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||||||||
** Values may differ between models.
config http
|
Parameter |
Description |
Type |
Size |
|||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
block-page-status-code |
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403). |
integer |
Minimum value: 100 Maximum value: 599 |
|||||||||||||||||||||||||||||||||||||||||||||
|
comfort-amount |
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||||||||||||||||||||||||||||||||||||||
|
comfort-interval |
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10). |
integer |
Minimum value: 1 Maximum value: 900 |
|||||||||||||||||||||||||||||||||||||||||||||
|
fortinet-bar |
Enable/disable Fortinet bar on HTML content. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
fortinet-bar-port |
Port for use by Fortinet Bar (1 - 65535, default = 8011). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||||||||||||||||||||||||||||||||||||||
|
inspect-all |
Enable/disable the inspection of all ports for the protocol. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||||||||||||||||||||||||||||||||||||||||
|
ports |
Ports to scan for content (1 - 65535, default = 80). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||||||||||||||||||||||||||||||||||||||
|
post-lang |
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
range-block |
Enable/disable blocking of partial downloads. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
retry-count |
Number of attempts to retry HTTP connection (0 - 100, default = 0). |
integer |
Minimum value: 0 Maximum value: 100 |
|||||||||||||||||||||||||||||||||||||||||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
ssl-offloaded |
SSL decryption and encryption performed by an external device. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
stream-based-uncompressed-limit |
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
|||||||||||||||||||||||||||||||||||||||||||||
|
streaming-content-bypass |
Enable/disable bypassing of streaming content from buffering. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
strip-x-forwarded-for |
Enable/disable stripping of HTTP X-Forwarded-For header. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
switching-protocols |
Bypass from scanning, or block a connection that attempts to switch protocol. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
tcp-window-maximum |
Maximum dynamic TCP window size (default = 8MB). |
integer |
Minimum value: 1048576 Maximum value: 33554432 |
|||||||||||||||||||||||||||||||||||||||||||||
|
tcp-window-minimum |
Minimum dynamic TCP window size (default = 128KB). |
integer |
Minimum value: 65536 Maximum value: 1048576 |
|||||||||||||||||||||||||||||||||||||||||||||
|
tcp-window-size |
Set TCP static window size (default = 256KB). |
integer |
Minimum value: 65536 Maximum value: 33554432 |
|||||||||||||||||||||||||||||||||||||||||||||
|
tcp-window-type |
Specify type of TCP window to use for this protocol. |
option |
- |
|||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||||||||||||||||||||||||||||||||||||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||||||||||||||||||||||||||||||||||||||||
** Values may differ between models.
config imap
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
inspect-all |
Enable/disable the inspection of all ports for the protocol. |
option |
- |
|||||||
|
|
|
|||||||||
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||
|
|
|
|||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||
|
ports |
Ports to scan for content (1 - 65535, default = 143). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||
|
|
|
|||||||||
|
ssl-offloaded |
SSL decryption and encryption performed by an external device. |
option |
- |
|||||||
|
|
|
|||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||
|
|
|
|||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||
** Values may differ between models.
config mail-signature
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
signature |
Email signature to be added to outgoing email (if the signature contains spaces, enclose with quotation marks). |
string |
Maximum length: 1023 |
|||||||
|
status |
Enable/disable adding an email signature to SMTP email messages as they pass through the FortiGate. |
option |
- |
|||||||
|
|
|
|||||||||
config mapi
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||
|
|
|
|||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||
|
ports |
Ports to scan for content (1 - 65535, default = 135). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||
|
|
|
|||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||
|
|
|
|||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||
** Values may differ between models.
config nntp
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
inspect-all |
Enable/disable the inspection of all ports for the protocol. |
option |
- |
|||||||
|
|
|
|||||||||
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||
|
|
|
|||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||
|
ports |
Ports to scan for content (1 - 65535, default = 119). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||
|
|
|
|||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||
|
|
|
|||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||
** Values may differ between models.
config pop3
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
inspect-all |
Enable/disable the inspection of all ports for the protocol. |
option |
- |
|||||||
|
|
|
|||||||||
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||
|
|
|
|||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||
|
ports |
Ports to scan for content (1 - 65535, default = 110). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||
|
|
|
|||||||||
|
ssl-offloaded |
SSL decryption and encryption performed by an external device. |
option |
- |
|||||||
|
|
|
|||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||
|
|
|
|||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||
** Values may differ between models.
config smtp
|
Parameter |
Description |
Type |
Size |
|||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
inspect-all |
Enable/disable the inspection of all ports for the protocol. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||||
|
ports |
Ports to scan for content (1 - 65535, default = 25). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
server-busy |
Enable/disable SMTP server busy when server not available. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
ssl-offloaded |
SSL decryption and encryption performed by an external device. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
status |
Enable/disable the active status of scanning for this protocol. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||||
** Values may differ between models.
config ssh
|
Parameter |
Description |
Type |
Size |
|||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
comfort-amount |
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1). |
integer |
Minimum value: 1 Maximum value: 65535 |
|||||||||
|
comfort-interval |
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10). |
integer |
Minimum value: 1 Maximum value: 900 |
|||||||||
|
options |
One or more options that can be applied to the session. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
oversize-limit |
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10). |
integer |
Minimum value: 1 Maximum value: 1606 ** |
|||||||||
|
scan-bzip2 |
Enable/disable scanning of BZip2 compressed files. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
uncompressed-nest-limit |
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12). |
integer |
Minimum value: 2 Maximum value: 100 |
|||||||||
|
uncompressed-oversize-limit |
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10). |
integer |
Minimum value: 0 Maximum value: 1606 ** |
|||||||||
** Values may differ between models.