config file-filter profile

Configure file-filter profiles.

config file-filter profile
    Description: Configure file-filter profiles.
    edit <name>
        set comment {var-string}
        set extended-log [disable|enable]
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set feature-set [flow|proxy]
        set log [disable|enable]
        set replacemsg-group {string}
        config rules
            Description: File filter rules.
            edit <name>
                set action [log-only|block|...]
                set comment {var-string}
                set direction [incoming|outgoing|...]
                set file-type <name1>, <name2>, ...
                set password-protected [yes|any]
                set protocol {option1}, {option2}, ...
            next
        end
        set scan-archive-contents [disable|enable]
        set uuid {uuid}
    next
end

config file-filter profile

Parameter	Description	Type	Size	Default
comment	Comment.	var-string	Maximum length: 255
extended-log	Enable/disable file-filter extended logging.	option	-	disable
	Option Description disable Disable extended logging. enable Enable extended logging.
fabric-force-sync *	Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.	option	-	disable
	Option Description enable Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. disable Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.
fabric-object *	Security Fabric global object setting.	option	-	disable
	Option Description enable Object is set as a security fabric-wide global object. disable Object is local to this security fabric member.
fabric-object-source *	Source of truth for fabric object.	option	-	root
	Option Description member Source of truth for this object is a non-root member of fabric. local Source of truth for this object is this security fabric member. root Source of truth for this object is the root of the fabric.
feature-set	Flow/proxy feature set.	option	-	flow
	Option Description flow Flow feature set. proxy Proxy feature set.
log	Enable/disable file-filter logging.	option	-	enable
	Option Description disable Disable logging. enable Enable logging.
name	Profile name.	string	Maximum length: 47
replacemsg-group	Replacement message group.	string	Maximum length: 35
scan-archive-contents	Enable/disable archive contents scan.	option	-	enable
	Option Description disable Disable scanning archive contents. enable Enable scanning archive contents.
uuid *	Universally Unique Identifier (UUID; automatically assigned but can be manually reset).	uuid	Not Specified	00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config rules

Parameter	Description	Type	Size	Default
action	Action taken for matched file.	option	-	log-only
	Option Description log-only Allow the content and write a log message. block Block the content and write a log message. warning Allow content after warning the user. Access is logged. Applies only to incoming HTTP traffic. Outgoing HTTP traffic and other protocols are log-only.
comment	Comment.	var-string	Maximum length: 255
direction	Traffic direction (HTTP, FTP, SSH, WEBSOCKET, CIFS, and MAPI only).	option	-	any
	Option Description incoming Match files transmitted in the session's reply direction. outgoing Match files transmitted in the session's originating direction. any Match files transmitted in the session's originating and reply directions.
file-type <name>	Select file type. File type name.	string	Maximum length: 39
name	File-filter rule name.	string	Maximum length: 35
password-protected	Match password-protected files.	option	-	any
	Option Description yes Match only password-protected files. any Match any file.
protocol	Protocols to apply rule to.	option	-	http ftp smtp imap pop3 mapi cifs ssh websocket **
	Option Description http Filter on HTTP. ftp Filter on FTP. smtp Filter on SMTP. imap Filter on IMAP. pop3 Filter on POP3. mapi Filter on MAPI. (Proxy mode only.) cifs Filter on CIFS. ssh Filter on SFTP and SCP. (Proxy mode only.) websocket Filter on WEBSOCKET. (Proxy mode only.)

** Values may differ between models.