config ssh-filter profile

SSH filter profile.

config ssh-filter profile
    Description: SSH filter profile.
    edit <name>
        set block {option1}, {option2}, ...
        set default-command-log [enable|disable]
        config file-filter
            Description: File filter.
            set status [enable|disable]
            set log [enable|disable]
            set scan-archive-contents [enable|disable]
            config entries
                Description: File filter entries.
                edit <filter>
                    set comment {var-string}
                    set action [log|block]
                    set direction [incoming|outgoing|...]
                    set password-protected [yes|any]
                    set file-type <name1>, <name2>, ...
                next
            end
        end
        set log {option1}, {option2}, ...
        config shell-commands
            Description: SSH command filter.
            edit <id>
                set type [simple|regex]
                set pattern {string}
                set action [block|allow]
                set log [enable|disable]
                set alert [enable|disable]
                set severity [low|medium|...]
            next
        end
    next
end

config ssh-filter profile

Parameter

Description

Type

Size

block

SSH blocking options.

option

Option	Description
x11	X server forwarding.
shell	SSH shell.
exec	SSH execution.
port-forward	Port forwarding.
tun-forward	Tunnel forwarding.
sftp	SFTP.
scp	SCP.
unknown	Unknown channel.

default-command-log

Enable/disable logging unmatched shell commands.

option

Option	Description
enable	Enable log unmatched shell commands.
disable	Disable log unmatched shell commands.

log

SSH logging options.

option

Option	Description
x11	X server forwarding.
shell	SSH shell.
exec	SSH execution.
port-forward	Port forwarding.
tun-forward	Tunnel forwarding.
sftp	SFTP.
scp	SCP.
unknown	Unknown channel.

name

SSH filter profile name.

string

Maximum length: 35

config file-filter

Parameter

Description

Type

Size

status

Enable/disable file filter.

option

Option	Description
enable	Enable file filter.
disable	Disable file filter.

log

Enable/disable file filter logging.

option

Option	Description
enable	Enable file filter logging.
disable	Disable file filter logging.

scan-archive-contents

Enable/disable file filter archive contents scan.

option

Option	Description
enable	Enable file filter archive contents scan.
disable	Disable file filter archive contents scan.

config entries

Parameter

Description

Type

Size

filter

Add a file filter.

string

Maximum length: 35

comment

Comment.

var-string

Maximum length: 255

action

Action taken for matched file.

option

Option	Description
log	Allow the content and write a log message.
block	Block the content and write a log message.

direction

Match files transmitted in the session's originating or reply direction.

option

Option	Description
incoming	Match files transmitted in the session's originating direction.
outgoing	Match files transmitted in the session's reply direction.
any	Match files transmitted in the session's originating and reply direction.

password-protected

Match password-protected files.

option

Option	Description
yes	Match only password-protected files.
any	Match any file.

file-type <name>

Select file type.

File type name.

string

Maximum length: 39

config shell-commands

Parameter

Description

Type

Size

Id.

integer

Minimum value: 0 Maximum value: 4294967295

type

Matching type.

option

Option	Description
simple	Match single command.
regex	Match command line using regular expression.

pattern

SSH shell command pattern.

string

Maximum length: 128

action

Action to take for URL filter matches.

option

Option	Description
block	Block the SSH shell command.
allow	Allow the SSH shell command.

log

Enable/disable logging.

option

Option	Description
enable	Enable logging.
disable	Disable logging.

alert

Enable/disable alert.

option

Option	Description
enable	Enable alert.
disable	Disable alert.

severity

Log severity.

option

Option	Description
low	Severity low.
medium	Severity medium.
high	Severity high.
critical	Severity critical.

config ssh-filter profile

SSH filter profile.

config ssh-filter profile
    Description: SSH filter profile.
    edit <name>
        set block {option1}, {option2}, ...
        set default-command-log [enable|disable]
        config file-filter
            Description: File filter.
            set status [enable|disable]
            set log [enable|disable]
            set scan-archive-contents [enable|disable]
            config entries
                Description: File filter entries.
                edit <filter>
                    set comment {var-string}
                    set action [log|block]
                    set direction [incoming|outgoing|...]
                    set password-protected [yes|any]
                    set file-type <name1>, <name2>, ...
                next
            end
        end
        set log {option1}, {option2}, ...
        config shell-commands
            Description: SSH command filter.
            edit <id>
                set type [simple|regex]
                set pattern {string}
                set action [block|allow]
                set log [enable|disable]
                set alert [enable|disable]
                set severity [low|medium|...]
            next
        end
    next
end

config ssh-filter profile

Parameter

Description

Type

Size

block

SSH blocking options.

option

Option	Description
x11	X server forwarding.
shell	SSH shell.
exec	SSH execution.
port-forward	Port forwarding.
tun-forward	Tunnel forwarding.
sftp	SFTP.
scp	SCP.
unknown	Unknown channel.

default-command-log

Enable/disable logging unmatched shell commands.

option

Option	Description
enable	Enable log unmatched shell commands.
disable	Disable log unmatched shell commands.

log

SSH logging options.

option

Option	Description
x11	X server forwarding.
shell	SSH shell.
exec	SSH execution.
port-forward	Port forwarding.
tun-forward	Tunnel forwarding.
sftp	SFTP.
scp	SCP.
unknown	Unknown channel.

name

SSH filter profile name.

string

Maximum length: 35

config file-filter

Parameter

Description

Type

Size

status

Enable/disable file filter.

option

Option	Description
enable	Enable file filter.
disable	Disable file filter.

log

Enable/disable file filter logging.

option

Option	Description
enable	Enable file filter logging.
disable	Disable file filter logging.

scan-archive-contents

Enable/disable file filter archive contents scan.

option

Option	Description
enable	Enable file filter archive contents scan.
disable	Disable file filter archive contents scan.

config entries

Parameter

Description

Type

Size

filter

Add a file filter.

string

Maximum length: 35

comment

Comment.

var-string

Maximum length: 255

action

Action taken for matched file.

option

Option	Description
log	Allow the content and write a log message.
block	Block the content and write a log message.

direction

Match files transmitted in the session's originating or reply direction.

option

Option	Description
incoming	Match files transmitted in the session's originating direction.
outgoing	Match files transmitted in the session's reply direction.
any	Match files transmitted in the session's originating and reply direction.

password-protected

Match password-protected files.

option

Option	Description
yes	Match only password-protected files.
any	Match any file.

file-type <name>

Select file type.

File type name.

string

Maximum length: 39

config shell-commands

Parameter

Description

Type

Size

Id.

integer

Minimum value: 0 Maximum value: 4294967295

type

Matching type.

option

Option	Description
simple	Match single command.
regex	Match command line using regular expression.

pattern

SSH shell command pattern.

string

Maximum length: 128

action

Action to take for URL filter matches.

option

Option	Description
block	Block the SSH shell command.
allow	Allow the SSH shell command.

log

Enable/disable logging.

option

Option	Description
enable	Enable logging.
disable	Disable logging.

alert

Enable/disable alert.

option

Option	Description
enable	Enable alert.
disable	Disable alert.

severity

Log severity.

option

Option	Description
low	Severity low.
medium	Severity medium.
high	Severity high.
critical	Severity critical.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

CLI Reference

config ssh-filter profile

config ssh-filter profile

config ssh-filter profile

config file-filter

config entries

config shell-commands

config ssh-filter profile

config ssh-filter profile

config ssh-filter profile

config file-filter

config entries

config shell-commands