Fortinet white logo
Fortinet white logo

CLI Reference

config antivirus quarantine

config antivirus quarantine

Configure quarantine options.

config antivirus quarantine
    Description: Configure quarantine options.
    set agelimit {integer}
    set destination [NULL|disk|...]
    set drop-blocked {option1}, {option2}, ...
    set drop-infected {option1}, {option2}, ...
    set drop-machine-learning {option1}, {option2}, ...
    set lowspace [drop-new|ovrw-old]
    set maxfilesize {integer}
    set quarantine-quota {integer}
    set store-blocked {option1}, {option2}, ...
    set store-infected {option1}, {option2}, ...
    set store-machine-learning {option1}, {option2}, ...
end

config antivirus quarantine

Parameter

Description

Type

Size

Default

agelimit

Age limit for quarantined files.

integer

Minimum value: 0 Maximum value: 479

0

destination

Choose whether to quarantine files to the FortiGate disk or to FortiAnalyzer or to delete them instead of quarantining them.

option

-

disk **

Option

Description

NULL

Files that would be quarantined are deleted.

disk

Quarantine files to the FortiGate hard disk.

FortiAnalyzer

FortiAnalyzer

drop-blocked

Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-infected

Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-machine-learning

Do not quarantine files detected by machine learning found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

lowspace

Select the method for handling additional files when running low on disk space.

option

-

ovrw-old

Option

Description

drop-new

Drop (delete) the most recently quarantined files.

ovrw-old

Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.

maxfilesize

Maximum file size to quarantine.

integer

Minimum value: 0 Maximum value: 500

0

quarantine-quota

The amount of disk space to reserve for quarantining files.

integer

Minimum value: 0 Maximum value: 4294967295

0

store-blocked

Quarantine blocked files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-infected

Quarantine infected files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-machine-learning

Quarantine files detected by machine learning found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

** Values may differ between models.

config antivirus quarantine

config antivirus quarantine

Configure quarantine options.

config antivirus quarantine
    Description: Configure quarantine options.
    set agelimit {integer}
    set destination [NULL|disk|...]
    set drop-blocked {option1}, {option2}, ...
    set drop-infected {option1}, {option2}, ...
    set drop-machine-learning {option1}, {option2}, ...
    set lowspace [drop-new|ovrw-old]
    set maxfilesize {integer}
    set quarantine-quota {integer}
    set store-blocked {option1}, {option2}, ...
    set store-infected {option1}, {option2}, ...
    set store-machine-learning {option1}, {option2}, ...
end

config antivirus quarantine

Parameter

Description

Type

Size

Default

agelimit

Age limit for quarantined files.

integer

Minimum value: 0 Maximum value: 479

0

destination

Choose whether to quarantine files to the FortiGate disk or to FortiAnalyzer or to delete them instead of quarantining them.

option

-

disk **

Option

Description

NULL

Files that would be quarantined are deleted.

disk

Quarantine files to the FortiGate hard disk.

FortiAnalyzer

FortiAnalyzer

drop-blocked

Do not quarantine dropped files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-infected

Do not quarantine infected files found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

drop-machine-learning

Do not quarantine files detected by machine learning found in sessions using the selected protocols. Dropped files are deleted instead of being quarantined.

option

-

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

lowspace

Select the method for handling additional files when running low on disk space.

option

-

ovrw-old

Option

Description

drop-new

Drop (delete) the most recently quarantined files.

ovrw-old

Overwrite the oldest quarantined files. That is, the files that are closest to being deleted from the quarantine.

maxfilesize

Maximum file size to quarantine.

integer

Minimum value: 0 Maximum value: 500

0

quarantine-quota

The amount of disk space to reserve for quarantining files.

integer

Minimum value: 0 Maximum value: 4294967295

0

store-blocked

Quarantine blocked files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-infected

Quarantine infected files found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

store-machine-learning

Quarantine files detected by machine learning found in sessions using the selected protocols.

option

-

imap smtp pop3 http ftp nntp imaps smtps pop3s https ftps mapi cifs ssh

Option

Description

imap

IMAP.

smtp

SMTP.

pop3

POP3.

http

HTTP.

ftp

FTP.

nntp

NNTP.

imaps

IMAPS.

smtps

SMTPS.

pop3s

POP3S.

https

HTTPS.

ftps

FTPS.

mapi

MAPI.

cifs

CIFS.

ssh

SSH.

** Values may differ between models.