Fortinet white logo
Fortinet white logo

CLI Reference

mailsetting mail-scan-options

mailsetting mail-scan-options

Use this command to configure how to scan the compressed files.

Syntax

config mailsetting mail-scan-options

set content-scan-level {high | low | medium}

set decompress-max-level <level_int>

set decompress-max-size <size_in_MB>

set scan-microsoft-msg {enable | disable}

set scan-timeout-action {tempfail | passthrough}

set scan-timeout-value <time-in-seconds>

end

Variable

Description

Default

content-scan-level {high | low | medium}

Set the scan level of dictionary and DLP rules.

When set to medium or high, FortiMail carries out regex recursive matching, which consumes more resources.

medium

decompress-max-level <level_int>

Specify how many levels to decompress the archived files for antivirus and content scan. Valid range is 1 to 36.

12

decompress-max-size <size_in_MB>

Specify the maximum file size to scan after the archived files are decompressed. This applies to every single file after decompression. Bigger files will not be scanned.

10

scan-microsoft-msg {enable | disable}

Enable to scan Microsoft Transport Neutral Encapsulation format (TNEF) and MSG format attachments.

enable

scan-timeout-action {tempfail | passthrough}

When the email attachments are large and the email scanning has timed out, FortiMail can either send a temporary fail message to the sender or just let the message pass through without further scanning.

tempfail

scan-timeout-value <time-in-seconds>

Specify how long in seconds FortiMail should spend on scanning email contents. The valid range is 270 to 900.

When the specified timeout has been reached, FortiMail will take the action specified above.

285

Related topics

mailsetting relay-host-list

mailsetting storage central-quarantine

mailsetting storage central-quarantine

mailsetting systemquarantine

mailsetting mail-scan-options

mailsetting mail-scan-options

Use this command to configure how to scan the compressed files.

Syntax

config mailsetting mail-scan-options

set content-scan-level {high | low | medium}

set decompress-max-level <level_int>

set decompress-max-size <size_in_MB>

set scan-microsoft-msg {enable | disable}

set scan-timeout-action {tempfail | passthrough}

set scan-timeout-value <time-in-seconds>

end

Variable

Description

Default

content-scan-level {high | low | medium}

Set the scan level of dictionary and DLP rules.

When set to medium or high, FortiMail carries out regex recursive matching, which consumes more resources.

medium

decompress-max-level <level_int>

Specify how many levels to decompress the archived files for antivirus and content scan. Valid range is 1 to 36.

12

decompress-max-size <size_in_MB>

Specify the maximum file size to scan after the archived files are decompressed. This applies to every single file after decompression. Bigger files will not be scanned.

10

scan-microsoft-msg {enable | disable}

Enable to scan Microsoft Transport Neutral Encapsulation format (TNEF) and MSG format attachments.

enable

scan-timeout-action {tempfail | passthrough}

When the email attachments are large and the email scanning has timed out, FortiMail can either send a temporary fail message to the sender or just let the message pass through without further scanning.

tempfail

scan-timeout-value <time-in-seconds>

Specify how long in seconds FortiMail should spend on scanning email contents. The valid range is 270 to 900.

When the specified timeout has been reached, FortiMail will take the action specified above.

285

Related topics

mailsetting relay-host-list

mailsetting storage central-quarantine

mailsetting storage central-quarantine

mailsetting systemquarantine