Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.2
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    antivirus quarantine

    Configure quarantine options.

      config antivirus quarantine
      Description: Configure quarantine options.
      set agelimit {integer}
      set maxfilesize {integer}
      set quarantine-quota {integer}
      set drop-infected {option1}, {option2}, ...
      set store-infected {option1}, {option2}, ...
      set drop-blocked {option1}, {option2}, ...
      set store-blocked {option1}, {option2}, ...
      set drop-heuristic {option1}, {option2}, ...
      set store-heuristic {option1}, {option2}, ...
      set lowspace [drop-new|ovrw-old]
      set destination [NULL|disk|...]
  end

    config antivirus quarantine

    Parameter Name Description Type Size
    agelimit Age limit for quarantined files (0 - 479 hours, 0 means forever). integer Minimum value: 0 Maximum value: 479
    maxfilesize Maximum file size to quarantine (0 - 500 Mbytes, 0 means unlimited). integer Minimum value: 0 Maximum value: 500
    quarantine-quota The amount of disk space to reserve for quarantining files (0 - 4294967295 Mbytes, depends on disk space). integer Minimum value: 0 Maximum value: 4294967295
    drop-infected Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    store-infected Quarantine infected files found in sessions using the selected protocols.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    drop-blocked Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    store-blocked Quarantine blocked files found in sessions using the selected protocols.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    drop-heuristic Do not quarantine files detected by heuristics found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    store-heuristic Quarantine files detected by heuristics found in sessions using the selected protocols.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    lowspace Select the method for handling additional files when running low on disk space.
    drop-new: Drop (delete) the most recently quarantined files.
    ovrw-old: Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.
    		 option -
    destination Choose whether to quarantine files to the FortiGate disk or to FortiAnalyzer or to delete them instead of quarantining them.
    NULL: Files that would be quarantined are deleted.
    disk: Quarantine files to the FortiGate hard disk.
    FortiAnalyzer: FortiAnalyzer
    		 option -
    Previous
    Next

    antivirus quarantine

    Configure quarantine options.

      config antivirus quarantine
      Description: Configure quarantine options.
      set agelimit {integer}
      set maxfilesize {integer}
      set quarantine-quota {integer}
      set drop-infected {option1}, {option2}, ...
      set store-infected {option1}, {option2}, ...
      set drop-blocked {option1}, {option2}, ...
      set store-blocked {option1}, {option2}, ...
      set drop-heuristic {option1}, {option2}, ...
      set store-heuristic {option1}, {option2}, ...
      set lowspace [drop-new|ovrw-old]
      set destination [NULL|disk|...]
  end

    config antivirus quarantine

    Parameter Name Description Type Size
    agelimit Age limit for quarantined files (0 - 479 hours, 0 means forever). integer Minimum value: 0 Maximum value: 479
    maxfilesize Maximum file size to quarantine (0 - 500 Mbytes, 0 means unlimited). integer Minimum value: 0 Maximum value: 500
    quarantine-quota The amount of disk space to reserve for quarantining files (0 - 4294967295 Mbytes, depends on disk space). integer Minimum value: 0 Maximum value: 4294967295
    drop-infected Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    store-infected Quarantine infected files found in sessions using the selected protocols.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    drop-blocked Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    store-blocked Quarantine blocked files found in sessions using the selected protocols.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    drop-heuristic Do not quarantine files detected by heuristics found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    store-heuristic Quarantine files detected by heuristics found in sessions using the selected protocols.
    imap: IMAP.
    smtp: SMTP.
    pop3: POP3.
    http: HTTP.
    ftp: FTP.
    nntp: NNTP.
    imaps: IMAPS.
    smtps: SMTPS.
    pop3s: POP3S.
    https: HTTPS.
    ftps: FTPS.
    mapi: MAPI.
    cifs: CIFS.
    ssh: SSH.
    mm1: MM1.
    mm3: MM3.
    mm4: MM4.
    mm7: MM7.
    		 option -
    lowspace Select the method for handling additional files when running low on disk space.
    drop-new: Drop (delete) the most recently quarantined files.
    ovrw-old: Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.
    		 option -
    destination Choose whether to quarantine files to the FortiGate disk or to FortiAnalyzer or to delete them instead of quarantining them.
    NULL: Files that would be quarantined are deleted.
    disk: Quarantine files to the FortiGate hard disk.
    FortiAnalyzer: FortiAnalyzer
    		 option -
    Previous
    Next