Antivirus uses the extended database by default

Starting with this version, the FortiGate uses the extended database as its default antivirus database. The normal database option is no longer supported. On FortiGate models that support the extreme database, you have the option to choose either the extended or extreme database. The FortiGate 300D is the lowest model that supports the extreme database. All VMs support the extreme database.

Under config antivirus settings, the default-db parameter has been removed.

FortiGate models that support extreme set database have a new use-extreme-db parameter.

By default, use-extreme-db is disabled so the FortiGate uses its normal and extended set databases. When you enable use-extreme-db, the FortiGate uses the extreme set database.

Upgrade support

Upgrading from 6.2.x to 6.4.0 causes the following changes.

Before upgrade	After upgrade
default-db = normal	use-extreme-db = disable (hidden on entry-level models)
default-db = extended	use-extreme-db = disable (hidden on entry-level models)
default-db = extreme	use-extreme-db = enable

Antivirus settings in the CLI

On entry-level models, use-extreme-db is hidden. This example shows the CLI output from a FortiGate 101E.

# show full-configuration antivirus settings
config antivirus settings
    set grayware enable
    set override-timeout 0
end

To configure the extreme database on a high-end model:

config antivirus settings
    set use-extreme-db enable
    set grayware enable
    set override-timeout 0
end

This example shows the CLI output from a FortiGate 600D.