config system fortiguard
Configure FortiGuard services.
config system fortiguard
Description: Configure FortiGuard services.
set fortiguard-anycast [enable|disable]
set fortiguard-anycast-source [fortinet|aws|...]
set protocol [udp|http|...]
set port [8888|53|...]
set load-balance-servers {integer}
set update-server-location [usa|any]
set sandbox-region {string}
set antispam-force-off [enable|disable]
set antispam-cache [enable|disable]
set antispam-cache-ttl {integer}
set antispam-cache-mpercent {integer}
set antispam-license {integer}
set antispam-expiration {integer}
set antispam-timeout {integer}
set outbreak-prevention-force-off [enable|disable]
set outbreak-prevention-cache [enable|disable]
set outbreak-prevention-cache-ttl {integer}
set outbreak-prevention-cache-mpercent {integer}
set outbreak-prevention-license {integer}
set outbreak-prevention-expiration {integer}
set outbreak-prevention-timeout {integer}
set webfilter-force-off [enable|disable]
set webfilter-cache [enable|disable]
set webfilter-cache-ttl {integer}
set webfilter-license {integer}
set webfilter-expiration {integer}
set webfilter-timeout {integer}
set sdns-server-ip {user}
set sdns-server-port {integer}
set anycast-sdns-server-ip {ipv4-address}
set anycast-sdns-server-port {integer}
set sdns-options {option1}, {option2}, ...
set source-ip {ipv4-address}
set source-ip6 {ipv6-address}
set proxy-server-ip {ipv4-address}
set proxy-server-port {integer}
set proxy-username {string}
set proxy-password {password}
set ddns-server-ip {ipv4-address}
set ddns-server-port {integer}
set interface-select-method [auto|sdwan|...]
set interface {string}
end
config system fortiguard
|
Parameter name |
Description |
Type |
Size |
||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
fortiguard-anycast |
Enable/disable use of FortiGuard's anycast network. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
fortiguard-anycast-source |
Configure which of Fortinet's servers to provide FortiGuard services in FortiGuard's anycast network. Default is Fortinet. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
protocol |
Protocol used to communicate with the FortiGuard servers. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
port |
Port used to communicate with the FortiGuard servers. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
load-balance-servers |
Number of servers to alternate between as first FortiGuard option. |
integer |
Minimum value: 1 Maximum value: 266 |
||||||||||
|
update-server-location |
Signature update server location. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
sandbox-region |
Cloud sandbox region. |
string |
Maximum length: 63 |
||||||||||
|
antispam-force-off |
Enable/disable turning off the FortiGuard antispam service. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
antispam-cache |
Enable/disable FortiGuard antispam request caching. Uses a small amount of memory but improves performance. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
antispam-cache-ttl |
Time-to-live for antispam cache entries in seconds (300 - 86400). Lower times reduce the cache size. Higher times may improve performance since the cache will have more entries. |
integer |
Minimum value: 300 Maximum value: 86400 |
||||||||||
|
antispam-cache-mpercent |
Maximum percent of FortiGate memory the antispam cache is allowed to use (1 - 15%). |
integer |
Minimum value: 1 Maximum value: 15 |
||||||||||
|
antispam-license |
Interval of time between license checks for the FortiGuard antispam contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
||||||||||
|
antispam-expiration |
Expiration date of the FortiGuard antispam contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
||||||||||
|
antispam-timeout |
Antispam query time out (1 - 30 sec, default = 7). |
integer |
Minimum value: 1 Maximum value: 30 |
||||||||||
|
outbreak-prevention-force-off |
Turn off FortiGuard Virus Outbreak Prevention service. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
outbreak-prevention-cache |
Enable/disable FortiGuard Virus Outbreak Prevention cache. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
outbreak-prevention-cache-ttl |
Time-to-live for FortiGuard Virus Outbreak Prevention cache entries (300 - 86400 sec, default = 300). |
integer |
Minimum value: 300 Maximum value: 86400 |
||||||||||
|
outbreak-prevention-cache-mpercent |
Maximum percent of memory FortiGuard Virus Outbreak Prevention cache can use (1 - 15%, default = 2). |
integer |
Minimum value: 1 Maximum value: 15 |
||||||||||
|
outbreak-prevention-license |
Interval of time between license checks for FortiGuard Virus Outbreak Prevention contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
||||||||||
|
outbreak-prevention-expiration |
Expiration date of FortiGuard Virus Outbreak Prevention contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
||||||||||
|
outbreak-prevention-timeout |
FortiGuard Virus Outbreak Prevention time out (1 - 30 sec, default = 7). |
integer |
Minimum value: 1 Maximum value: 30 |
||||||||||
|
webfilter-force-off |
Enable/disable turning off the FortiGuard web filtering service. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
webfilter-cache |
Enable/disable FortiGuard web filter caching. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
webfilter-cache-ttl |
Time-to-live for web filter cache entries in seconds (300 - 86400). |
integer |
Minimum value: 300 Maximum value: 86400 |
||||||||||
|
webfilter-license |
Interval of time between license checks for the FortiGuard web filter contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
||||||||||
|
webfilter-expiration |
Expiration date of the FortiGuard web filter contract. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
||||||||||
|
webfilter-timeout |
Web filter query time out (1 - 30 sec, default = 7). |
integer |
Minimum value: 1 Maximum value: 30 |
||||||||||
|
sdns-server-ip |
IP address of the FortiGuard DNS rating server. |
user |
Not Specified |
||||||||||
|
sdns-server-port |
Port to connect to on the FortiGuard DNS rating server. |
integer |
Minimum value: 1 Maximum value: 65535 |
||||||||||
|
anycast-sdns-server-ip |
IP address of the FortiGuard anycast DNS rating server. |
ipv4-address |
Not Specified |
||||||||||
|
anycast-sdns-server-port |
Port to connect to on the FortiGuard anycast DNS rating server. |
integer |
Minimum value: 1 Maximum value: 65535 |
||||||||||
|
sdns-options |
Customization options for the FortiGuard DNS service. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
source-ip |
Source IPv4 address used to communicate with FortiGuard. |
ipv4-address |
Not Specified |
||||||||||
|
source-ip6 |
Source IPv6 address used to communicate with FortiGuard. |
ipv6-address |
Not Specified |
||||||||||
|
proxy-server-ip |
IP address of the proxy server. |
ipv4-address |
Not Specified |
||||||||||
|
proxy-server-port |
Port used to communicate with the proxy server. |
integer |
Minimum value: 0 Maximum value: 65535 |
||||||||||
|
proxy-username |
Proxy user name. |
string |
Maximum length: 64 |
||||||||||
|
proxy-password |
Proxy user password. |
password |
Not Specified |
||||||||||
|
ddns-server-ip |
IP address of the FortiDDNS server. |
ipv4-address |
Not Specified |
||||||||||
|
ddns-server-port |
Port used to communicate with FortiDDNS servers. |
integer |
Minimum value: 1 Maximum value: 65535 |
||||||||||
|
interface-select-method |
Specify how to select outgoing interface to reach server. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
interface |
Specify outgoing interface to reach server. |
string |
Maximum length: 15 |
||||||||||