config system fortiguard
Configure FortiGuard services.
config system fortiguard
Description: Configure FortiGuard services.
set fortiguard-anycast [enable|disable]
set fortiguard-anycast-source [fortinet|aws|...]
set protocol [udp|http|...]
set port [8888|53|...]
set service-account-id {string}
set load-balance-servers {integer}
set auto-join-forticloud [enable|disable]
set update-server-location [automatic|usa|...]
set sandbox-region {string}
set sandbox-inline-scan [enable|disable]
set update-ffdb [enable|disable]
set update-uwdb [enable|disable]
set update-extdb [enable|disable]
set update-build-proxy [enable|disable]
set persistent-connection [enable|disable]
set vdom {string}
set auto-firmware-upgrade [enable|disable]
set auto-firmware-upgrade-day {option1}, {option2}, ...
set auto-firmware-upgrade-start-hour {integer}
set auto-firmware-upgrade-end-hour {integer}
set antispam-force-off [enable|disable]
set antispam-cache [enable|disable]
set antispam-cache-ttl {integer}
set antispam-cache-mpercent {integer}
set antispam-license {integer}
set antispam-expiration {integer}
set antispam-timeout {integer}
set outbreak-prevention-force-off [enable|disable]
set outbreak-prevention-cache [enable|disable]
set outbreak-prevention-cache-ttl {integer}
set outbreak-prevention-cache-mpercent {integer}
set outbreak-prevention-license {integer}
set outbreak-prevention-expiration {integer}
set outbreak-prevention-timeout {integer}
set webfilter-force-off [enable|disable]
set webfilter-cache [enable|disable]
set webfilter-cache-ttl {integer}
set webfilter-license {integer}
set webfilter-expiration {integer}
set webfilter-timeout {integer}
set sdns-server-ip {user}
set sdns-server-port {integer}
set anycast-sdns-server-ip {ipv4-address}
set anycast-sdns-server-port {integer}
set sdns-options {option1}, {option2}, ...
set source-ip {ipv4-address}
set source-ip6 {ipv6-address}
set proxy-server-ip {string}
set proxy-server-port {integer}
set proxy-username {string}
set proxy-password {password}
set videofilter-license {integer}
set videofilter-expiration {integer}
set ddns-server-ip {ipv4-address}
set ddns-server-ip6 {ipv6-address}
set ddns-server-port {integer}
set interface-select-method [auto|sdwan|...]
set interface {string}
end
config system fortiguard
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
fortiguard-anycast |
Enable/disable use of FortiGuard's Anycast network. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
fortiguard-anycast-source |
Configure which of Fortinet's servers to provide FortiGuard services in FortiGuard's anycast network. Default is Fortinet. |
option |
- |
fortinet |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
protocol |
Protocol used to communicate with the FortiGuard servers. |
option |
- |
https |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
port |
Port used to communicate with the FortiGuard servers. |
option |
- |
443 |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
service-account-id * |
Service account ID. |
string |
Not Specified |
|
||||||||||||||||
|
load-balance-servers |
Number of servers to alternate between as first FortiGuard option. |
integer |
Minimum value: 1 Maximum value: 266 |
1 |
||||||||||||||||
|
auto-join-forticloud * |
Automatically connect to and login to FortiCloud. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
update-server-location |
Location from which to receive FortiGuard updates. |
option |
- |
automatic |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
sandbox-region |
FortiCloud Sandbox region. |
string |
Not Specified |
|
||||||||||||||||
|
sandbox-inline-scan |
Enable/disable FortiCloud Sandbox inline-scan. |
option |
- |
disable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
update-ffdb |
Enable/disable Internet Service Database update. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
update-uwdb |
Enable/disable allowlist update. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
update-extdb |
Enable/disable external resource update. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
update-build-proxy |
Enable/disable proxy dictionary rebuild. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
persistent-connection |
Enable/disable use of persistent connection to receive update notification from FortiGuard. |
option |
- |
disable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
vdom |
FortiGuard Service virtual domain name. |
string |
Not Specified |
|
||||||||||||||||
|
auto-firmware-upgrade |
Enable/disable automatic patch-level firmware upgrade from FortiGuard. The FortiGate unit searches for new patches only in the same major and minor version. |
option |
- |
disable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
auto-firmware-upgrade-day |
Allowed day(s) of the week to start automatic patch-level firmware upgrade from FortiGuard. |
option |
- |
sunday monday tuesday wednesday thursday friday saturday |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
auto-firmware-upgrade-start-hour |
Start time in the designated time window for automatic patch-level firmware upgrade from FortiGuard in 24 hour time . The actual upgrade time is selected randomly within the time window. |
integer |
Minimum value: 0 Maximum value: 23 |
2 |
||||||||||||||||
|
auto-firmware-upgrade-end-hour |
End time in the designated time window for automatic patch-level firmware upgrade from FortiGuard in 24 hour time . When the end time is smaller than the start time, the end time is interpreted as the next day. The actual upgrade time is selected randomly within the time window. |
integer |
Minimum value: 0 Maximum value: 23 |
4 |
||||||||||||||||
|
antispam-force-off |
Enable/disable turning off the FortiGuard antispam service. |
option |
- |
disable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
antispam-cache |
Enable/disable FortiGuard antispam request caching. Uses a small amount of memory but improves performance. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
antispam-cache-ttl |
Time-to-live for antispam cache entries in seconds . Lower times reduce the cache size. Higher times may improve performance since the cache will have more entries. |
integer |
Minimum value: 300 Maximum value: 86400 |
1800 |
||||||||||||||||
|
antispam-cache-mpercent |
Maximum percentage of FortiGate memory the antispam cache is allowed to use . |
integer |
Minimum value: 1 Maximum value: 15 |
2 |
||||||||||||||||
|
antispam-license |
Interval of time between license checks for the FortiGuard antispam contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
4294967295 |
||||||||||||||||
|
antispam-expiration |
Expiration date of the FortiGuard antispam contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||
|
antispam-timeout |
Antispam query time out . |
integer |
Minimum value: 1 Maximum value: 30 |
7 |
||||||||||||||||
|
outbreak-prevention-force-off |
Turn off FortiGuard Virus Outbreak Prevention service. |
option |
- |
disable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
outbreak-prevention-cache |
Enable/disable FortiGuard Virus Outbreak Prevention cache. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
outbreak-prevention-cache-ttl |
Time-to-live for FortiGuard Virus Outbreak Prevention cache entries . |
integer |
Minimum value: 300 Maximum value: 86400 |
300 |
||||||||||||||||
|
outbreak-prevention-cache-mpercent |
Maximum percent of memory FortiGuard Virus Outbreak Prevention cache can use . |
integer |
Minimum value: 1 Maximum value: 15 |
2 |
||||||||||||||||
|
outbreak-prevention-license |
Interval of time between license checks for FortiGuard Virus Outbreak Prevention contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
4294967295 |
||||||||||||||||
|
outbreak-prevention-expiration |
Expiration date of FortiGuard Virus Outbreak Prevention contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||
|
outbreak-prevention-timeout |
FortiGuard Virus Outbreak Prevention time out . |
integer |
Minimum value: 1 Maximum value: 30 |
7 |
||||||||||||||||
|
webfilter-force-off |
Enable/disable turning off the FortiGuard web filtering service. |
option |
- |
disable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
webfilter-cache |
Enable/disable FortiGuard web filter caching. |
option |
- |
enable |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
webfilter-cache-ttl |
Time-to-live for web filter cache entries in seconds . |
integer |
Minimum value: 300 Maximum value: 86400 |
3600 |
||||||||||||||||
|
webfilter-license |
Interval of time between license checks for the FortiGuard web filter contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
4294967295 |
||||||||||||||||
|
webfilter-expiration |
Expiration date of the FortiGuard web filter contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||
|
webfilter-timeout |
Web filter query time out . |
integer |
Minimum value: 1 Maximum value: 30 |
15 |
||||||||||||||||
|
sdns-server-ip |
IP address of the FortiGuard DNS rating server. |
user |
Not Specified |
|
||||||||||||||||
|
sdns-server-port |
Port to connect to on the FortiGuard DNS rating server. |
integer |
Minimum value: 1 Maximum value: 65535 |
53 |
||||||||||||||||
|
anycast-sdns-server-ip |
IP address of the FortiGuard anycast DNS rating server. |
ipv4-address |
Not Specified |
0.0.0.0 |
||||||||||||||||
|
anycast-sdns-server-port |
Port to connect to on the FortiGuard anycast DNS rating server. |
integer |
Minimum value: 1 Maximum value: 65535 |
853 |
||||||||||||||||
|
sdns-options |
Customization options for the FortiGuard DNS service. |
option |
- |
|
||||||||||||||||
|
|
|
|||||||||||||||||||
|
source-ip |
Source IPv4 address used to communicate with FortiGuard. |
ipv4-address |
Not Specified |
0.0.0.0 |
||||||||||||||||
|
source-ip6 |
Source IPv6 address used to communicate with FortiGuard. |
ipv6-address |
Not Specified |
:: |
||||||||||||||||
|
proxy-server-ip |
Hostname or IP address of the proxy server. |
string |
Not Specified |
|
||||||||||||||||
|
proxy-server-port |
Port used to communicate with the proxy server. |
integer |
Minimum value: 0 Maximum value: 65535 |
0 |
||||||||||||||||
|
proxy-username |
Proxy user name. |
string |
Not Specified |
|
||||||||||||||||
|
proxy-password |
Proxy user password. |
password |
Not Specified |
|
||||||||||||||||
|
videofilter-license |
Interval of time between license checks for the FortiGuard video filter contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
4294967295 |
||||||||||||||||
|
videofilter-expiration |
Expiration date of the FortiGuard video filter contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||
|
ddns-server-ip |
IP address of the FortiDDNS server. |
ipv4-address |
Not Specified |
0.0.0.0 |
||||||||||||||||
|
ddns-server-ip6 |
IPv6 address of the FortiDDNS server. |
ipv6-address |
Not Specified |
:: |
||||||||||||||||
|
ddns-server-port |
Port used to communicate with FortiDDNS servers. |
integer |
Minimum value: 1 Maximum value: 65535 |
443 |
||||||||||||||||
|
interface-select-method |
Specify how to select outgoing interface to reach server. |
option |
- |
auto |
||||||||||||||||
|
|
|
|||||||||||||||||||
|
interface |
Specify outgoing interface to reach server. |
string |
Not Specified |
|
||||||||||||||||
* This parameter may not exist in some models.