"<file-upload-restriction-policy_name>"

Enter the name of an existing or new file security policy. The maximum length is 63 characters.

To display the list of existing policies, enter:

edit ?

action {alert | alert_deny | block-period | deny_no_log}

Enter the action you want FortiWeb to perform when the policy is violated:

• alert—Accept the request and generate an alert and/or log message.

• alert_deny—Block the request (or reset the connection) and generate an alert email and/or log message.
  

  You can customize the web page that FortiWeb returns to the client with the HTTP status code. For details, see system replacemsg and the FortiWeb Administration Guide:

  http://docs.fortinet.com/fortiweb/admin-guides

• block-period—Block subsequent requests from the client for a number of seconds. Also configure block-period <seconds_int>.

• deny_no_log—Deny a request. Do not generate a log message.

Note: If FortiWeb is deployed behind a NAT load balancer, when using this option, you must also define an X-header that indicates the original client’s IP. Failure to do so may cause FortiWeb to block all connections when it detects a violation of this type. For details, see waf x-forwarded-for.

Caution: This setting will be ignored if monitor-mode {enable | disable} is enabled.

Note: Logging and/or alert email will occur only if enabled and configured. For details, see log disk and log alertMail.

Note: If an auto-learning profile will be selected in the policy with Offline Protection profiles that use this rule, you should select alert. If the action is alert_deny, the FortiWeb appliance will reset the connection when it detects an attack, resulting in incomplete session information for the auto-learning feature. For details about auto-learning requirements, see waf web-protection-profile autolearning-profile.

block-period <seconds_int>

severity {High | Medium | Low | Info}

trigger <trigger-policy_name>

Enter the name of the trigger to apply when this policy is violated. For details, see log trigger-policy. The maximum length is 63 characters.

To display the list of existing triggers, enter:

set trigger ?

trojan-detection {enable | disable}

av-scan {enable | disable}

Enter enable to scan for viruses, malware, and greyware.

fortisandbox-check {enable | disable}

exchange-mail-detection {enable | disable}

Enter enable so that FortiWeb will scan email attachments in applications using OWA or ActiveSync protocols. If enabled, FortiWeb will perform Trojan detection, an antivirus scan, and will send the attachments to FortiSandbox.

Note: To perform Trojan detection, an antivirus scan, and send attachments to FortiSandbox, you must enable trojan-detection {enable | disable}, trojan-detection {enable | disable}, and fortisandbox-check {enable | disable}, respectively, in the file security policy.

owa-protocol {enable | disable}

activesync-protocol {enable | disable}

<entry_index>

file-upload-restriction-rule <rule_name>

Enter the name of an upload restriction rule to use with the policy, if any. For details, see server-policy custom-application application-policy. The maximum length is 63 characters.

To display the list of existing rules, enter:

set file-upload-restriction-rule ?

{enable | disable}