Fortinet white logo
Fortinet white logo

CLI Reference

config antivirus quarantine

config antivirus quarantine

Configure quarantine options.

config antivirus quarantine
    Description: Configure quarantine options.
    set agelimit {integer}
    set maxfilesize {integer}
    set quarantine-quota {integer}
    set drop-infected {option1}, {option2}, ...
    set store-infected {option1}, {option2}, ...
    set drop-blocked {option1}, {option2}, ...
    set store-blocked {option1}, {option2}, ...
    set drop-machine-learning {option1}, {option2}, ...
    set store-machine-learning {option1}, {option2}, ...
    set lowspace [drop-new|ovrw-old]
    set destination [NULL|disk|...]
end

config antivirus quarantine

Parameter

Description

Type

Size

Default

agelimit

Age limit for quarantined files.

integer

Minimum value: 0 Maximum value: 479

0

maxfilesize

Maximum file size to quarantine.

integer

Minimum value: 0 Maximum value: 500

0

quarantine-quota

The amount of disk space to reserve for quarantining files.

integer

Minimum value: 0 Maximum value: 4294967295

0

drop-infected

Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-infected

Quarantine infected files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-blocked

Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-blocked

Quarantine blocked files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-machine-learning

Do not quarantine files detected by machine learning found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-machine-learning

Quarantine files detected by machine learning found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

lowspace

Select the method for handling additional files when running low on disk space.

option

-

ovrw-old

Option

Description

drop-new

Drop (delete) the most recently quarantined files.

ovrw-old

Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.

destination

Choose whether to quarantine files to the FortiProxy disk or to FortiAnalyzer or to delete them instead of quarantining them.

option

-

NULL

Option

Description

NULL

Files that would be quarantined are deleted.

disk

Quarantine files to the FortiProxy hard disk.

FortiAnalyzer

FortiAnalyzer

config antivirus quarantine

config antivirus quarantine

Configure quarantine options.

config antivirus quarantine
    Description: Configure quarantine options.
    set agelimit {integer}
    set maxfilesize {integer}
    set quarantine-quota {integer}
    set drop-infected {option1}, {option2}, ...
    set store-infected {option1}, {option2}, ...
    set drop-blocked {option1}, {option2}, ...
    set store-blocked {option1}, {option2}, ...
    set drop-machine-learning {option1}, {option2}, ...
    set store-machine-learning {option1}, {option2}, ...
    set lowspace [drop-new|ovrw-old]
    set destination [NULL|disk|...]
end

config antivirus quarantine

Parameter

Description

Type

Size

Default

agelimit

Age limit for quarantined files.

integer

Minimum value: 0 Maximum value: 479

0

maxfilesize

Maximum file size to quarantine.

integer

Minimum value: 0 Maximum value: 500

0

quarantine-quota

The amount of disk space to reserve for quarantining files.

integer

Minimum value: 0 Maximum value: 4294967295

0

drop-infected

Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-infected

Quarantine infected files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-blocked

Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-blocked

Quarantine blocked files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-machine-learning

Do not quarantine files detected by machine learning found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-machine-learning

Quarantine files detected by machine learning found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

lowspace

Select the method for handling additional files when running low on disk space.

option

-

ovrw-old

Option

Description

drop-new

Drop (delete) the most recently quarantined files.

ovrw-old

Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.

destination

Choose whether to quarantine files to the FortiProxy disk or to FortiAnalyzer or to delete them instead of quarantining them.

option

-

NULL

Option

Description

NULL

Files that would be quarantined are deleted.

disk

Quarantine files to the FortiProxy hard disk.

FortiAnalyzer

FortiAnalyzer