Fortinet black logo

CLI Reference

config virtual-patch profile

config virtual-patch profile

Configure virtual-patch profile.

config virtual-patch profile
    Description: Configure virtual-patch profile.
    edit <name>
        set action [pass|block]
        set comment {var-string}
        config exemption
            Description: Exempt devices or rules.
            edit <id>
                set status [enable|disable]
                set rule <id1>, <id2>, ...
                set device <mac1>, <mac2>, ...
            next
        end
        set log [enable|disable]
        set severity {option1}, {option2}, ...
    next
end

config virtual-patch profile

Parameter

Description

Type

Size

Default

action

Action (pass/block).

option

-

block

Option

Description

pass

Allows session that match the profile.

block

Blocks sessions that match the profile.

comment

Comment.

var-string

Maximum length: 255

log

Enable/disable logging of detection.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

name

Profile name.

string

Maximum length: 35

severity

Relative severity of the signature (low, medium, high, critical).

option

-

low medium high critical

Option

Description

low

low

medium

medium

high

high

critical

critical

config exemption

Parameter

Description

Type

Size

Default

id

IDs.

integer

Minimum value: 0 Maximum value: 4294967295

0

status

Enable/disable exemption.

option

-

enable

Option

Description

enable

Enable exemption.

disable

Disable exemption.

rule <id>

Patch signature rule IDs.

Rule IDs.

integer

Minimum value: 0 Maximum value: 4294967295

device <mac>

Device MAC addresses.

Device MAC address.

mac-address

Not Specified

config virtual-patch profile

Configure virtual-patch profile.

config virtual-patch profile
    Description: Configure virtual-patch profile.
    edit <name>
        set action [pass|block]
        set comment {var-string}
        config exemption
            Description: Exempt devices or rules.
            edit <id>
                set status [enable|disable]
                set rule <id1>, <id2>, ...
                set device <mac1>, <mac2>, ...
            next
        end
        set log [enable|disable]
        set severity {option1}, {option2}, ...
    next
end

config virtual-patch profile

Parameter

Description

Type

Size

Default

action

Action (pass/block).

option

-

block

Option

Description

pass

Allows session that match the profile.

block

Blocks sessions that match the profile.

comment

Comment.

var-string

Maximum length: 255

log

Enable/disable logging of detection.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

name

Profile name.

string

Maximum length: 35

severity

Relative severity of the signature (low, medium, high, critical).

option

-

low medium high critical

Option

Description

low

low

medium

medium

high

high

critical

critical

config exemption

Parameter

Description

Type

Size

Default

id

IDs.

integer

Minimum value: 0 Maximum value: 4294967295

0

status

Enable/disable exemption.

option

-

enable

Option

Description

enable

Enable exemption.

disable

Disable exemption.

rule <id>

Patch signature rule IDs.

Rule IDs.

integer

Minimum value: 0 Maximum value: 4294967295

device <mac>

Device MAC addresses.

Device MAC address.

mac-address

Not Specified