Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

ms365 policy

Use this command to configure Microsoft 365 scan policies. You must have domain administrator privileges to access Microsoft 365.

Syntax

config ms365 policy

edit <name>

set profile-antispam <name>

set profile-antivirus <name>

set profile-content <name>

set profile-dlp <name>

set recipient-domain <string>

set recipient-name <string>

set sender-domain <string>

set sender-name <string>

set sender-type {external | internal | wildcard}

set source-ip-address <ipv4mask>

set source-type {geoip-group | ip-address | ip-group}

set status {enable | disable}

end

Variable

Description

Default

profile-antispam <name> Assign an antispam profile to the real-time scan policy.

 

profile-antivirus <name> Assign an antivirus profile to the real-time scan policy.

 

profile-content <name> Assign an content profile to the real-time scan policy.

 

profile-dlp <name> Assign an DLP profile to the real-time scan policy.

 

recipient-domain <string> Domain part of recipient email address.

 

recipient-name <string> Local part of recipient email address.

 

sender-domain <string> Domain part of sender email address.

 

sender-name <string> Local part of sender email address.

 

sender-type {external | internal | wildcard} Define the sender as either external, internal, or wildcard pattern.

wildcard

source-ip-address <ipv4mask> Client IP address and netmask.

0.0.0.0/0

source-type {geoip-group | ip-address | ip-group} Define the source as either GeoIP group, IP address and netmask, or IP group.

ip-address

status {enable | disable} Enable or disable the policy.

disable

ms365 policy

Use this command to configure Microsoft 365 scan policies. You must have domain administrator privileges to access Microsoft 365.

Syntax

config ms365 policy

edit <name>

set profile-antispam <name>

set profile-antivirus <name>

set profile-content <name>

set profile-dlp <name>

set recipient-domain <string>

set recipient-name <string>

set sender-domain <string>

set sender-name <string>

set sender-type {external | internal | wildcard}

set source-ip-address <ipv4mask>

set source-type {geoip-group | ip-address | ip-group}

set status {enable | disable}

end

Variable

Description

Default

profile-antispam <name> Assign an antispam profile to the real-time scan policy.

 

profile-antivirus <name> Assign an antivirus profile to the real-time scan policy.

 

profile-content <name> Assign an content profile to the real-time scan policy.

 

profile-dlp <name> Assign an DLP profile to the real-time scan policy.

 

recipient-domain <string> Domain part of recipient email address.

 

recipient-name <string> Local part of recipient email address.

 

sender-domain <string> Domain part of sender email address.

 

sender-name <string> Local part of sender email address.

 

sender-type {external | internal | wildcard} Define the sender as either external, internal, or wildcard pattern.

wildcard

source-ip-address <ipv4mask> Client IP address and netmask.

0.0.0.0/0

source-type {geoip-group | ip-address | ip-group} Define the source as either GeoIP group, IP address and netmask, or IP group.

ip-address

status {enable | disable} Enable or disable the policy.

disable