The name of the proxy option profile.

Optional description of the proxy option profile.

Enable this setting to log when oversized files are processed. The setting does not change how the files are processed. It only enables the FortiProxy unit to log that they were either blocked or allowed through. A common practice is to allow larger files through without antivirus processing. This practice allows you to get an idea of how often this happens and decide on whether to alter the settings relating to the treatment of oversized files.

Enable or disable the inspection of RPC over HTTP.

To optimize the resources of the unit, enable or disable the mapping and inspection of protocols. When you enable a protocol, the default port numbers are automatically filled in, but you can change them.

Common Options

When proxy-based antivirus scanning is enabled, the FortiProxy unit buffers files as they are downloaded. After the entire file is captured, the FortiProxy unit begins scanning the file. During the buffering and scanning procedure, the user must wait. After the scan is completed, if no infection is found, the file is sent to the next step in the process flow. If the file is a large one this part of the process can take some time. In some cases enough time that some users may get impatient and cancel the download.

The Comfort Clients feature mitigates this potential issue by feeding a trickle of data while waiting for the scan to complete. The user then knows that processing is taking place and that there hasn’t been a failure in the transmission. The slow transfer rate continues until the antivirus scan is complete. After the file has been successfully scanned and found to be clean of any viruses, the transfer will proceed at full speed.

Enable and then configure the following:

• Interval (seconds)—Enter the interval time in seconds. The default is 10.

• Amount (bytes—Enter the amount in bytes. The default is 1.

You can block files or emails that are larger than a specified size.

Enable and then enter the threshold size in megabytes of the files and emails to block.

Web Options

The HTTP section allows the enabling of Chunked Bypass. This refers to the mechanism in version 1.1 of HTTP that allows a web server to start sending chunks of dynamically generated output in response to a request before actually knowing the actual size of the content. Where dynamically generated content is concerned, enabling this feature means that there is a faster initial response to HTTP requests. From a security stand point, enabling this feature means that the content is not held in the proxy as an entire file before proceeding.

Enable or disable the chunked bypass setting.