Fortinet black logo

prescan-config

prescan-config

Configure support for large files of up to 10GB in VM. Large file support is only available for VMs although this command is available on all platforms. Large files are usually archive files that contain many files.

In a cluster environment, use this command only in the primary node and the setting is synchronized to other nodes.

Tooltip

We recommend to only specifying one option each time.

Syntax

prescan-config [-a|-b|-c|-h|-l|-n|-u]

Option

Description

-a

Set size limit (<100M) of the archive file that will be scanned with the executable file in VM (default 5M)

While scanning executable child files inside a zip file, the zip file may be needed as well. This is because the executable child files may reference another file inside the zip file. FortiSandbox is able to pass the parent zip file into the VM along with the executable child file while it is scanning inside the VM. However, for performance reasons, the default maximum size of the parent zip that can be passed into the VM is 5M. You can modify this value to up to 100M if needed.

-b

Set big file (>512MB) unpack timeout in seconds (default = 600).

The timeout value is applied to each individual file. For a big file, there is an overall hardcoded timeout of 3600 seconds. If timeout occurs when unpacking a file, it is put in the non-VM queue.

-c

Set maximum number of child files to extract from archive file (default = 1000).

This maximum number is applied to the overall unpacking process of the top level archive file. The maximum depends on model.

-h

Help information.

-l

Show prescan settings.

-n

Set regular file (<=512MB) unpack timeout in seconds (default = 15).

The timeout value is applied to each individual file. For a regular file, there is an overall hardcoded timeout of the number of files multiplied by 10 seconds. If timeout occurs when unpacking a file, it is put in the non-VM queue.

-u

Unset all prescan settings, that is, set to default.

prescan-config

Configure support for large files of up to 10GB in VM. Large file support is only available for VMs although this command is available on all platforms. Large files are usually archive files that contain many files.

In a cluster environment, use this command only in the primary node and the setting is synchronized to other nodes.

Tooltip

We recommend to only specifying one option each time.

Syntax

prescan-config [-a|-b|-c|-h|-l|-n|-u]

Option

Description

-a

Set size limit (<100M) of the archive file that will be scanned with the executable file in VM (default 5M)

While scanning executable child files inside a zip file, the zip file may be needed as well. This is because the executable child files may reference another file inside the zip file. FortiSandbox is able to pass the parent zip file into the VM along with the executable child file while it is scanning inside the VM. However, for performance reasons, the default maximum size of the parent zip that can be passed into the VM is 5M. You can modify this value to up to 100M if needed.

-b

Set big file (>512MB) unpack timeout in seconds (default = 600).

The timeout value is applied to each individual file. For a big file, there is an overall hardcoded timeout of 3600 seconds. If timeout occurs when unpacking a file, it is put in the non-VM queue.

-c

Set maximum number of child files to extract from archive file (default = 1000).

This maximum number is applied to the overall unpacking process of the top level archive file. The maximum depends on model.

-h

Help information.

-l

Show prescan settings.

-n

Set regular file (<=512MB) unpack timeout in seconds (default = 15).

The timeout value is applied to each individual file. For a regular file, there is an overall hardcoded timeout of the number of files multiplied by 10 seconds. If timeout occurs when unpacking a file, it is put in the non-VM queue.

-u

Unset all prescan settings, that is, set to default.