DOCUMENT LIBRARY

FortiGate / FortiOS

FortiManager

FortiAnalyzer

CLI Reference

FortiProxy CLI Interface
alertemail
- config alertemail setting
antivirus
- config antivirus heuristic
- config antivirus profile
- config antivirus quarantine
- config antivirus settings
application
- config application custom
- config application list
- config application name
- config application rule-settings
authentication
- config authentication rule
- config authentication scheme
- config authentication setting
certificate
- config certificate ca
- config certificate crl
- config certificate local
- config certificate remote
- config certificate setting
cifs
- config cifs domain-controller
- config cifs profile
credential-store
- config credential-store domain-controller
diagnose
- diagnose alertconsole
- diagnose antivirus bypass
- diagnose antivirus database-info
- diagnose antivirus quarantine
- diagnose antivirus test
- diagnose autoupdate
- diagnose central-mgmt script-history
- diagnose cp cp9kxp
- diagnose cp cp9vpn
- diagnose debug admin error-log
- diagnose debug application
- diagnose debug authd
- diagnose debug cli
- diagnose debug cmdb-trace
- diagnose debug cmdb-walk
- diagnose debug config-error-log
- diagnose debug console
- diagnose debug crashlog
- diagnose debug disable
- diagnose debug duration
- diagnose debug enable
- diagnose debug fsso-polling
- diagnose debug info
- diagnose debug kernel
- diagnose debug rating
- diagnose debug report
- diagnose debug reset
- diagnose debug sdnc valgrind
- diagnose debug sql-log-error
- diagnose debug urlfilter
- diagnose disktest
- diagnose fdsm account-info
- diagnose fdsm central-mgmt-status
- diagnose fdsm cfg-diff
- diagnose fdsm cfg-download
- diagnose fdsm cfg-list
- diagnose fdsm cfg-upload
- diagnose fdsm contract-controller-update
- diagnose fdsm fc-installer-download
- diagnose fdsm fds-update
- diagnose fdsm forticlient-net-info
- diagnose fdsm forticlient-update
- diagnose fdsm fortisw-download
- diagnose fdsm fortisw-latest-ver
- diagnose fdsm ftk-activiate
- diagnose fdsm image-download
- diagnose fdsm image-list
- diagnose fdsm image-upgrade-matrix
- diagnose fdsm log-controller-update
- diagnose fdsm message-update
- diagnose fdsm modem-list
- diagnose fdsm report-download
- diagnose fdsm report-list
- diagnose fdsm sslvpn-man-upgrade
- diagnose fdsm sslvpn-package-download
- diagnose firewall auth
- diagnose firewall fqdn list
- diagnose firewall ipgeo
- diagnose fortiguard ipblacklist
- diagnose fortitoken
- diagnose fortiview
- diagnose geoip
- diagnose hardware
- diagnose http-view
- diagnose internet-service
- diagnose ip address
- diagnose ip arp
- diagnose ip framed-ip
- diagnose ip route
- diagnose ip tcp
- diagnose ip udp
- diagnose ips
- get ips global
- get ips rule status
- get log custom-field
- get log disk
- get log eventfilter
- get log fortianalyzer setting
- get log fortianalyzer2 setting
- get log fortianalyzer3 setting
- get ssh-filter profile
- get system accprofile
- get system admin
- get system alias
- get system api-user
- get system arp-table
- get user
- get wanopt
- get webfilter categories
- get webfilter content
- get webfilter cookie-ovrd
- get webfilter content-header
dlp
- config dlp filepattern
- config dlp fp-sensitivity
- config dlp sensor
dnsfilter
- config dnsfilter domain-filter
- config dnsfilter profile
execute
- execute api-user
- execute auto-script backup
- execute auto-script delete
- execute auto-script result
- execute auto-script start
- execute auto-script status
- execute auto-script stop
- execute auto-script stopall
- execute backup
- execute batch
- execute central-mgmt
- execute certificate
- execute cfg reload
- execute cfg save
- execute clear system arp table
- execute cli
- execute date
- execute disconnect-admin-session
- execute disk
- execute erase-disk
- execute factoryreset-shutdown
- execute factoryreset
- execute factoryreset2
- execute firewall
- execute formatlogdisk
- execute forticlient info
- execute forticlient list
- execute fortiguard-log
- execute fortiguard-message
- execute fortitoken-mobile
- execute fortitoken
- execute fsso
- execute ha disconnect
- execute ha manage
- execute ha set-priority
- execute ha synchronize
- execute http-view
- execute log backup
- execute log delete-all
- execute log delete
- execute log detail
- execute log display
- execute log filter
- execute log flush-cache-all
- execute log flush-cache
- execute log fortianalyzer
- execute log fortiguard
- execute log list
- execute log roll
- execute log shift-time
- execute ping-options
- execute ping
- execute ping6-options
- execute ping6
- execute preload http-transaction-log
- execute preload list
- execute preload show-log
- execute preload url-delete
- execute preload url
- execute reboot
- execute report-config
- execute report
- execute restore
- execute send-fds-statistics
- execute shutdown
- execute ssh
- execute system custom-language
- execute system fortisandbox
- execute tac
- execute telnet
- execute time
- execute traceroute-options
- execute traceroute
- execute tracert6
- execute update-av
- execute update-geo-ip
- execute update-ips
- execute update-list
- execute update-now
- execute upload
- execute usb-device disconnect
- execute usb-device list
- execute usb-disk
- execute vpn
- execute webcache
- execute webfilter
firewall
- config firewall address
- config firewall address6
- config firewall addrgrp
- config firewall addrgrp6
- config firewall central-snat-map
- config firewall decrypted-traffic-mirror
- config firewall internet-service-custom
- config firewall internet-service
- config firewall ippool
- config firewall ippool6
- config firewall policy
- config firewall profile-group
- config firewall profile-protocol-options
- config firewall proxy-address
- config firewall proxy-addrgrp
- config firewall schedule group
- config firewall schedule onetime
- config firewall schedule recurring
- config firewall service category
- config firewall service custom
- config firewall service group
- config firewall shaping-policy
- config firewall shaping-profile
- config firewall sniffer
- config firewall ssh host-key
- config firewall ssh local-ca
- config firewall ssh local-key
- config firewall ssh setting
- config firewall ssl-server
- config firewall ssl-ssh-profile
- config firewall ssl setting
- config firewall vip
- config firewall vipgrp
ftp-proxy
- config ftp-proxy explicit
icap
- config icap local-server
- config icap profile
- config icap remote-server-group
- config icap remote-server
image-analyzer
- config image-analyzer profile
ips
- config ips custom
- config ips decoder
- config ips global
- config ips rule-settings
- config ips rule
- config ips sensor
- config ips settings
log
- config log custom-field
- config log disk filter
- config log disk setting
- config log eventfilter
- config log fortianalyzer2 filter
- config log fortianalyzer2 setting
- config log fortianalyzer3 filter
- config log fortianalyzer3 setting
- config log fortianalyzer filter
- config log fortianalyzer override-filter
- config log fortianalyzer override-setting
- config log fortianalyzer setting
- config log fortiguard filter
- config log fortiguard override-filter
- config log fortiguard override-setting
- config log fortiguard setting
- config log gui-display
- config log memory filter
- config log memory global-setting
- config log memory setting
- config log null-device filter
- config log null-device setting
- config log setting
- config log syslogd2 filter
- config log syslogd2 setting
- config log syslogd3 filter
- config log syslogd3 setting
- config log syslogd4 filter
- config log syslogd4 setting
- config log syslogd filter
- config log syslogd override-filter
- config log syslogd override-setting
- config log syslogd setting
- config log threat-weight
- config log webtrends filter
- config log webtrends setting
report
- config report chart
- config report dataset
- config report layout
- config report setting
- config report style
- config report theme
router
- config router static
- config router static6
spamfilter
- config spamfilter bwl
- config spamfilter bword
- config spamfilter dnsbl
- config spamfilter fortishield
- config spamfilter iptrust
- config spamfilter mheader
- config spamfilter options
- config spamfilter profile
ssh-filter
- config ssh-filter profile
system
- config system accprofile
- config system admin
- config system affinity-interrupt
- config system affinity-packet-redistribution
- config system alarm
- config system alias
- config system api-user
- config system arp-table
- config system auto-install
- config system auto-script
- config system autoupdate push-update
- config system autoupdate schedule
- config system autoupdate tunneling
- config system central-management
- config system console
- config system csf
- config system custom-language
- config system dhcp6 server
- config system dhcp server
- config system dns-database
- config system dns-server
- config system dns
- config system email-server
- config system external-resource
- config system fips-cc
- config system fm
- config system fortiguard
- config system fortimanager
- config system fortisandbox
- config system fsso-polling
- config system ftm-push
- config system geoip-override
- config system global
- config system gre-tunnel
- config system ha-monitor
- config system ha
- config system interface
- config system ips-urlfilter-dns
- config system link-monitor
- config system nethsm
- config system network-visibility
- config system ntp
- config system object-tag
- config system password-policy-guest-admin
- config system password-policy
- config system replacemsg-group
- config system replacemsg-image
- config system replacemsg admin
- config system replacemsg alertmail
- config system replacemsg auth
- config system replacemsg device-detection-portal
- config system replacemsg ec
- config system replacemsg fortiguard-wf
- config system replacemsg ftp
- config system replacemsg http
- config system replacemsg icap
- config system replacemsg mail
- config system replacemsg nac-quar
- config system replacemsg nntp
- config system replacemsg spam
- config system replacemsg sslvpn
- config system replacemsg traffic-quota
- config system replacemsg utm
- config system replacemsg webproxy
- config system resource-limits
- config system sdn-connector
- config system settings
- config system sms-server
- config system snmp community
- config system snmp sysinfo
- config system snmp user
- config system span-port
- config system storage
- config system vdom-dns
- config system vdom-property
- config system vdom-radius-server
- config system vdom
- config system wccp
- config system zone
user
- config user adgrp
- config user domain-controller
- config user fortitoken
- config user fsso-polling
- config user fsso
- config user group
- config user krb-keytab
- config user ldap
- config user local
- config user password-policy
- config user peer
- config user peergrp
- config user pop3
- config user radius
- config user saml
- config user setting
- config user tacacs+
vpn
- config vpn ipsec phase1-interface
- config vpn ipsec phase2-interface
- config vpn ssl settings
- config vpn ssl web host-check-software
- config vpn ssl web portal
- config vpn ssl web realm
- config vpn ssl web user-bookmark
- config vpn ssl web user-group-bookmark
wanopt
- config wanopt auth-group
- config wanopt cache-service
- config wanopt content-delivery-network-rule
- config wanopt peer
- config wanopt profile
- config wanopt settings
web-proxy
- config web-proxy debug-url
- config web-proxy dynamic-bypass
- config web-proxy explicit
- config web-proxy forward-server-group
- config web-proxy forward-server
- config web-proxy global
- config web-proxy isolator-server
- config web-proxy pac-policy
- config web-proxy profile
- config web-proxy url-list
- config web-proxy url-match
- config web-proxy wisp
webcache
- config webcache reverse-cache-prefetch-url
- config webcache reverse-cache-server
- config webcache settings
- config webcache user-agent
webfilter
- config webfilter content-header
- config webfilter content
- config webfilter cookie-ovrd
- config webfilter fortiguard
- config webfilter ftgd-local-cat
- config webfilter ftgd-local-rating
- config webfilter ips-urlfilter-cache-setting
- config webfilter ips-urlfilter-setting
- config webfilter override
- config webfilter profile
- config webfilter search-engine
- config webfilter urlfilter
Change log

Home FortiProxy 2.0.13 CLI Reference

2.0.13

config antivirus profile

Configure AntiVirus profiles.

config antivirus profile
    Description: Configure AntiVirus profiles.
    edit <name>
        set comment {var-string}
        set replacemsg-group {string}
        set ftgd-analytics [disable|suspicious|...]
        set analytics-max-upload {integer}
        set analytics-wl-filetype {integer}
        set analytics-bl-filetype {integer}
        set analytics-db [disable|enable]
        set mobile-malware-db [disable|enable]
        config http
            Description: Configure HTTP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config ftp
            Description: Configure FTP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config imap
            Description: Configure IMAP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config pop3
            Description: Configure POP3 AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config smtp
            Description: Configure SMTP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config mapi
            Description: Configure MAPI AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config cifs
            Description: Configure CIFS AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config ssh
            Description: Configure SFTP and SCP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config nac-quar
            Description: Configure AntiVirus quarantine settings.
            set infected [none|quar-src-ip]
            set expiry {user}
            set log [enable|disable]
        end
        set av-virus-log [enable|disable]
        set av-block-log [enable|disable]
        set scan-mode [default|legacy]
    next
end

config antivirus profile

Parameter

Description

Type

Size

name

Profile name.

string

Maximum length: 35

comment

Comment.

var-string

Maximum length: 255

replacemsg-group

Replacement message group customized for this profile.

string

Maximum length: 35

ftgd-analytics

Settings to control which files are uploaded to FortiSandbox.

option

Option	Description
disable	Do not upload files to FortiSandbox.
suspicious	Submit files supported by FortiSandbox if heuristics or other methods determine they are suspicious.
everything	Submit all files scanned by AntiVirus to FortiSandbox. AntiVirus may not scan all files.

analytics-max-upload

Maximum size of files that can be uploaded to FortiSandbox.

integer

Minimum value: 1 Maximum value: 435

analytics-wl-filetype

Do not submit files matching this DLP file-pattern to FortiSandbox.

integer

Minimum value: 0 Maximum value: 4294967295

analytics-bl-filetype

Only submit files matching this DLP file-pattern to FortiSandbox.

integer

Minimum value: 0 Maximum value: 4294967295

analytics-db

Enable/disable using the FortiSandbox signature database to supplement the AV signature databases.

option

Option	Description
disable	Use only the standard AV signature databases.
enable	Also use the FortiSandbox signature database.

mobile-malware-db

Enable/disable using the mobile malware signature database.

option

Option	Description
disable	Do not use the mobile malware signature database.
enable	Also use the mobile malware signature database.

av-virus-log

Enable/disable AntiVirus logging.

option

Option	Description
enable	Enable AntiVirus logging.
disable	Disable AntiVirus logging.

av-block-log

Enable/disable logging for AntiVirus file blocking.

option

Option	Description
enable	Enable logging for AntiVirus file blocking.
disable	Disable logging for AntiVirus file blocking.

scan-mode

Choose between default scan mode and legacy scan mode.

option

Option	Description
default	Aggregate scanning mode.
legacy	Force scanunit to scan all files.

config http

Parameter

Description

Type

Size

options

Enable/disable HTTP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable HTTP antivirus scanning.
avmonitor	Enable HTTP antivirus logging.
quarantine	Enable HTTP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config ftp

Parameter

Description

Type

Size

options

Enable/disable FTP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable FTP antivirus scanning.
avmonitor	Enable FTP antivirus logging.
quarantine	Enable FTP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config imap

Parameter

Description

Type

Size

options

Enable/disable IMAP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable IMAP antivirus scanning.
avmonitor	Enable IMAP antivirus logging.
quarantine	Enable IMAP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config pop3

Parameter

Description

Type

Size

options

Enable/disable POP3 AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable POP3 antivirus scanning.
avmonitor	Enable POP3 antivirus logging.
quarantine	Enable POP3 antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config smtp

Parameter

Description

Type

Size

options

Enable/disable SMTP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable SMTP antivirus scanning.
avmonitor	Enable SMTP antivirus logging.
quarantine	Enable SMTP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config mapi

Parameter

Description

Type

Size

options

Enable/disable MAPI AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable MAPI antivirus scanning.
avmonitor	Enable MAPI antivirus logging.
quarantine	Enable MAPI antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config cifs

Parameter

Description

Type

Size

options

Enable/disable CIFS AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable CIFS antivirus scanning.
avmonitor	Enable CIFS antivirus logging.
quarantine	Enable CIFS antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config ssh

Parameter

Description

Type

Size

options

Enable/disable SFTP and SCP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable SSH antivirus scanning.
avmonitor	Enable SSH antivirus logging.
quarantine	Enable SSH antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config nac-quar

Parameter

Description

Type

Size

infected

Enable/Disable quarantining infected hosts to the banned user list.

option

Option	Description
none	Do not quarantine infected hosts.
quar-src-ip	Quarantine all traffic from the infected hosts source IP.

expiry

Duration of quarantine.

user

Not Specified

log

Enable/disable AntiVirus quarantine logging.

option

Option	Description
enable	Enable AntiVirus quarantine logging.
disable	Disable AntiVirus quarantine logging.

config antivirus profile

Configure AntiVirus profiles.

config antivirus profile
    Description: Configure AntiVirus profiles.
    edit <name>
        set comment {var-string}
        set replacemsg-group {string}
        set ftgd-analytics [disable|suspicious|...]
        set analytics-max-upload {integer}
        set analytics-wl-filetype {integer}
        set analytics-bl-filetype {integer}
        set analytics-db [disable|enable]
        set mobile-malware-db [disable|enable]
        config http
            Description: Configure HTTP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config ftp
            Description: Configure FTP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config imap
            Description: Configure IMAP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config pop3
            Description: Configure POP3 AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config smtp
            Description: Configure SMTP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config mapi
            Description: Configure MAPI AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
            set executables [default|virus]
        end
        config cifs
            Description: Configure CIFS AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config ssh
            Description: Configure SFTP and SCP AntiVirus options.
            set options [scan|avmonitor|...]
            set archive-block [encrypted|corrupted|...]
            set archive-log [encrypted|corrupted|...]
            set emulator [enable|disable]
        end
        config nac-quar
            Description: Configure AntiVirus quarantine settings.
            set infected [none|quar-src-ip]
            set expiry {user}
            set log [enable|disable]
        end
        set av-virus-log [enable|disable]
        set av-block-log [enable|disable]
        set scan-mode [default|legacy]
    next
end

config antivirus profile

Parameter

Description

Type

Size

name

Profile name.

string

Maximum length: 35

comment

Comment.

var-string

Maximum length: 255

replacemsg-group

Replacement message group customized for this profile.

string

Maximum length: 35

ftgd-analytics

Settings to control which files are uploaded to FortiSandbox.

option

Option	Description
disable	Do not upload files to FortiSandbox.
suspicious	Submit files supported by FortiSandbox if heuristics or other methods determine they are suspicious.
everything	Submit all files scanned by AntiVirus to FortiSandbox. AntiVirus may not scan all files.

analytics-max-upload

Maximum size of files that can be uploaded to FortiSandbox.

integer

Minimum value: 1 Maximum value: 435

analytics-wl-filetype

Do not submit files matching this DLP file-pattern to FortiSandbox.

integer

Minimum value: 0 Maximum value: 4294967295

analytics-bl-filetype

Only submit files matching this DLP file-pattern to FortiSandbox.

integer

Minimum value: 0 Maximum value: 4294967295

analytics-db

Enable/disable using the FortiSandbox signature database to supplement the AV signature databases.

option

Option	Description
disable	Use only the standard AV signature databases.
enable	Also use the FortiSandbox signature database.

mobile-malware-db

Enable/disable using the mobile malware signature database.

option

Option	Description
disable	Do not use the mobile malware signature database.
enable	Also use the mobile malware signature database.

av-virus-log

Enable/disable AntiVirus logging.

option

Option	Description
enable	Enable AntiVirus logging.
disable	Disable AntiVirus logging.

av-block-log

Enable/disable logging for AntiVirus file blocking.

option

Option	Description
enable	Enable logging for AntiVirus file blocking.
disable	Disable logging for AntiVirus file blocking.

scan-mode

Choose between default scan mode and legacy scan mode.

option

Option	Description
default	Aggregate scanning mode.
legacy	Force scanunit to scan all files.

config http

Parameter

Description

Type

Size

options

Enable/disable HTTP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable HTTP antivirus scanning.
avmonitor	Enable HTTP antivirus logging.
quarantine	Enable HTTP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config ftp

Parameter

Description

Type

Size

options

Enable/disable FTP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable FTP antivirus scanning.
avmonitor	Enable FTP antivirus logging.
quarantine	Enable FTP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config imap

Parameter

Description

Type

Size

options

Enable/disable IMAP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable IMAP antivirus scanning.
avmonitor	Enable IMAP antivirus logging.
quarantine	Enable IMAP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config pop3

Parameter

Description

Type

Size

options

Enable/disable POP3 AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable POP3 antivirus scanning.
avmonitor	Enable POP3 antivirus logging.
quarantine	Enable POP3 antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config smtp

Parameter

Description

Type

Size

options

Enable/disable SMTP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable SMTP antivirus scanning.
avmonitor	Enable SMTP antivirus logging.
quarantine	Enable SMTP antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config mapi

Parameter

Description

Type

Size

options

Enable/disable MAPI AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable MAPI antivirus scanning.
avmonitor	Enable MAPI antivirus logging.
quarantine	Enable MAPI antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

executables

Treat Windows executable files as viruses for the purpose of blocking or monitoring.

option

Option	Description
default	Perform standard AntiVirus scanning of Windows executable files.
virus	Treat Windows executables as viruses.

config cifs

Parameter

Description

Type

Size

options

Enable/disable CIFS AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable CIFS antivirus scanning.
avmonitor	Enable CIFS antivirus logging.
quarantine	Enable CIFS antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config ssh

Parameter

Description

Type

Size

options

Enable/disable SFTP and SCP AntiVirus scanning, monitoring, and quarantine.

option

Option	Description
scan	Enable SSH antivirus scanning.
avmonitor	Enable SSH antivirus logging.
quarantine	Enable SSH antivirus quarantine. Files are quarantined depending on quarantine settings.

archive-block

Select the archive types to block.

option

Option	Description
encrypted	Block encrypted archives.
corrupted	Block corrupted archives.
multipart	Block multipart archives.
nested	Block nested archives.
mailbomb	Block mail bomb archives.
unhandled	Block archives that FortiProxy cannot open.

archive-log

Select the archive types to log.

option

Option	Description
encrypted	Log encrypted archives.
corrupted	Log corrupted archives.
multipart	Log multipart archives.
nested	Log nested archives.
mailbomb	Log mail bomb archives.
unhandled	Log archives that FortiProxy cannot open.

emulator

Enable/disable the virus emulator.

option

Option	Description
enable	Enable the virus emulator.
disable	Disable the virus emulator.

config nac-quar

Parameter

Description

Type

Size

infected

Enable/Disable quarantining infected hosts to the banned user list.

option

Option	Description
none	Do not quarantine infected hosts.
quar-src-ip	Quarantine all traffic from the infected hosts source IP.

expiry

Duration of quarantine.

user

Not Specified

log

Enable/disable AntiVirus quarantine logging.

option

Option	Description
enable	Enable AntiVirus quarantine logging.
disable	Disable AntiVirus quarantine logging.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

CLI Reference

config antivirus profile

config antivirus profile

config antivirus profile

config http

config ftp

config imap

config pop3

config smtp

config mapi

config cifs

config ssh