Fortinet black logo

Administration Guide

Creating an antivirus profile

Creating an antivirus profile

To create an antivirus profile:
  1. Go to Security Profiles > AntiVirus and select Create New to create a new antivirus profile.

    The Create AntiVirus Profile window opens.

  2. Enter the following information:

    Name

    The name of the antivirus profile.

    Comments

    Optionally, enter comments about the antivirus profile.

    AntiVirus Scan Service

    For HTTP and SSH protocols, set the antivirus service as disable, block, or monitor (default = Disable):

    • Disable: Disable antivirus scanning and monitoring.

    • Block: When a virus is detected, prevent the infected files from uploading to or downloading from the target server. A security log is recorded and available in Log & Report > ZTNA.

    • Monitor: When a virus is detected, allow the infected files. A security log is recorded and available Log & Report > ZTNA.

    Notes:

    • HTTP protocol applies to Web SFTP and Web SMB launchers.

    • SCP protocol applies to the WinSCP launcher.

  3. Click OK.

AV protection via the CLI Example

  1. In the CLI console, enter the following commands:

    config antivirus profile

    edit <profile-name>

    config http

    set av-scan block

    end

    config ssh

    set av-scan block

    end

    next

    end

Creating an antivirus profile

To create an antivirus profile:
  1. Go to Security Profiles > AntiVirus and select Create New to create a new antivirus profile.

    The Create AntiVirus Profile window opens.

  2. Enter the following information:

    Name

    The name of the antivirus profile.

    Comments

    Optionally, enter comments about the antivirus profile.

    AntiVirus Scan Service

    For HTTP and SSH protocols, set the antivirus service as disable, block, or monitor (default = Disable):

    • Disable: Disable antivirus scanning and monitoring.

    • Block: When a virus is detected, prevent the infected files from uploading to or downloading from the target server. A security log is recorded and available in Log & Report > ZTNA.

    • Monitor: When a virus is detected, allow the infected files. A security log is recorded and available Log & Report > ZTNA.

    Notes:

    • HTTP protocol applies to Web SFTP and Web SMB launchers.

    • SCP protocol applies to the WinSCP launcher.

  3. Click OK.

AV protection via the CLI Example

  1. In the CLI console, enter the following commands:

    config antivirus profile

    edit <profile-name>

    config http

    set av-scan block

    end

    config ssh

    set av-scan block

    end

    next

    end