Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

config antivirus quarantine

Configure quarantine options.

config antivirus quarantine

Description: Configure quarantine options.

set agelimit {integer}

set maxfilesize {integer}

set quarantine-quota {integer}

set drop-infected {option1}, {option2}, ...

set store-infected {option1}, {option2}, ...

set drop-blocked {option1}, {option2}, ...

set store-blocked {option1}, {option2}, ...

set drop-heuristic {option1}, {option2}, ...

set store-heuristic {option1}, {option2}, ...

set lowspace [drop-new|ovrw-old]

set destination [NULL|disk|...]

end

config antivirus quarantine

Parameter name

Description

Type

Size

agelimit

Age limit for quarantined files (0 - 479 hours, 0 means forever).

integer

Minimum value: 0 Maximum value: 479

maxfilesize

Maximum file size to quarantine (0 - 500 Mbytes, 0 means unlimited).

integer

Minimum value: 0 Maximum value: 500

quarantine-quota

The amount of disk space to reserve for quarantining files (0 - 4294967295 Mbytes, depends on disk space).

integer

Minimum value: 0 Maximum value: 4294967295

drop-infected

Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

store-infected

Quarantine infected files found in sessions using the selected protocols.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

drop-blocked

Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

store-blocked

Quarantine blocked files found in sessions using the selected protocols.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

drop-heuristic

Do not quarantine files detected by heuristics found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

store-heuristic

Quarantine files detected by heuristics found in sessions using the selected protocols.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

lowspace

Select the method for handling additional files when running low on disk space.

option

-

 

Option

Description

drop-new

Drop (delete) the most recently quarantined files.

ovrw-old

Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.

destination

Choose whether to quarantine files to the FortiGate disk or to FortiAnalyzer or to delete them instead of quarantining them.

option

-

 

Option

Description

NULL

Files that would be quarantined are deleted.

disk

Quarantine files to the FortiGate hard disk.

FortiAnalyzer

FortiAnalyzer

config antivirus quarantine

Configure quarantine options.

config antivirus quarantine

Description: Configure quarantine options.

set agelimit {integer}

set maxfilesize {integer}

set quarantine-quota {integer}

set drop-infected {option1}, {option2}, ...

set store-infected {option1}, {option2}, ...

set drop-blocked {option1}, {option2}, ...

set store-blocked {option1}, {option2}, ...

set drop-heuristic {option1}, {option2}, ...

set store-heuristic {option1}, {option2}, ...

set lowspace [drop-new|ovrw-old]

set destination [NULL|disk|...]

end

config antivirus quarantine

Parameter name

Description

Type

Size

agelimit

Age limit for quarantined files (0 - 479 hours, 0 means forever).

integer

Minimum value: 0 Maximum value: 479

maxfilesize

Maximum file size to quarantine (0 - 500 Mbytes, 0 means unlimited).

integer

Minimum value: 0 Maximum value: 500

quarantine-quota

The amount of disk space to reserve for quarantining files (0 - 4294967295 Mbytes, depends on disk space).

integer

Minimum value: 0 Maximum value: 4294967295

drop-infected

Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

store-infected

Quarantine infected files found in sessions using the selected protocols.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

drop-blocked

Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

store-blocked

Quarantine blocked files found in sessions using the selected protocols.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

drop-heuristic

Do not quarantine files detected by heuristics found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

store-heuristic

Quarantine files detected by heuristics found in sessions using the selected protocols.

option

-

 

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

mm1

MM1.

mm3

MM3.

mm4

MM4.

mm7

MM7.

lowspace

Select the method for handling additional files when running low on disk space.

option

-

 

Option

Description

drop-new

Drop (delete) the most recently quarantined files.

ovrw-old

Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.

destination

Choose whether to quarantine files to the FortiGate disk or to FortiAnalyzer or to delete them instead of quarantining them.

option

-

 

Option

Description

NULL

Files that would be quarantined are deleted.

disk

Quarantine files to the FortiGate hard disk.

FortiAnalyzer

FortiAnalyzer