Fortinet black logo

CLI Reference

6.4.3
7.4.3
7.4.2
7.4.1
7.4.0
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.15
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.16
6.2.15
6.2.14
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.0.0
5.6.0
5.4.0
5.2.0
5.0.0

file-filter profile

Configure file-filter profiles.

  config file-filter profile
      Description: Configure file-filter profiles.
      edit <name>
          set comment {var-string}
          set feature-set [flow|proxy]
          set replacemsg-group {string}
          set log [disable|enable]
          set extended-log [disable|enable]
          set scan-archive-contents [disable|enable]
          config rules
              Description: File filter rules.
              edit <name>
                  set comment {var-string}
                  set protocol {option1}, {option2}, ...
                  set action [log-only|block]
                  set direction [incoming|outgoing|...]
                  set password-protected [yes|any]
                  set file-type <name1>, <name2>, ...
              next
          end
      next
  end

config file-filter profile

Parameter Name Description Type Size
comment Comment. var-string Maximum length: 255
feature-set Flow/proxy feature set.
flow: Flow feature set.
proxy: Proxy feature set.
 option -
replacemsg-group Replacement message group string Maximum length: 35
log Enable/disable file-filter logging.
disable: Disable logging.
enable: Enable logging.
 option -
extended-log Enable/disable file-filter extended logging.
disable: Disable extended logging.
enable: Enable extended logging.
 option -
scan-archive-contents Enable/disable archive contents scan. (Not for CIFS)
disable: Disable scanning archive contents.
enable: Enable scanning archive contents.
 option -

config rules

Parameter Name Description Type Size
comment Comment. var-string Maximum length: 255
protocol Protocols to apply rule to.
http: Filter on HTTP.
ftp: Filter on FTP.
smtp: Filter on SMTP.
imap: Filter on IMAP.
pop3: Filter on POP3.
mapi: Filter on MAPI. (Proxy mode only.)
cifs: Filter on CIFS.
ssh: Filter on SFTP and SCP. (Proxy mode only.)
 option -
action Action taken for matched file.
log-only: Allow the content and write a log message.
block: Block the content and write a log message.
 option -
direction Traffic direction. (HTTP, FTP, SSH, CIFS only)
incoming: Match files transmitted in the session's reply direction.
outgoing: Match files transmitted in the session's originating direction.
any: Match files transmitted in the session's originating and reply directions.
 option -
password-protected Match password-protected files.
yes: Match only password-protected files.
any: Match any file.
 option -
file-type <name> Select file type.
File type name.		 string Maximum length: 39
Previous
Next

Configure file-filter profiles.

  config file-filter profile
      Description: Configure file-filter profiles.
      edit <name>
          set comment {var-string}
          set feature-set [flow|proxy]
          set replacemsg-group {string}
          set log [disable|enable]
          set extended-log [disable|enable]
          set scan-archive-contents [disable|enable]
          config rules
              Description: File filter rules.
              edit <name>
                  set comment {var-string}
                  set protocol {option1}, {option2}, ...
                  set action [log-only|block]
                  set direction [incoming|outgoing|...]
                  set password-protected [yes|any]
                  set file-type <name1>, <name2>, ...
              next
          end
      next
  end

config file-filter profile

Parameter Name Description Type Size
comment Comment. var-string Maximum length: 255
feature-set Flow/proxy feature set.
flow: Flow feature set.
proxy: Proxy feature set.
 option -
replacemsg-group Replacement message group string Maximum length: 35
log Enable/disable file-filter logging.
disable: Disable logging.
enable: Enable logging.
 option -
extended-log Enable/disable file-filter extended logging.
disable: Disable extended logging.
enable: Enable extended logging.
 option -
scan-archive-contents Enable/disable archive contents scan. (Not for CIFS)
disable: Disable scanning archive contents.
enable: Enable scanning archive contents.
 option -

config rules

Parameter Name Description Type Size
comment Comment. var-string Maximum length: 255
protocol Protocols to apply rule to.
http: Filter on HTTP.
ftp: Filter on FTP.
smtp: Filter on SMTP.
imap: Filter on IMAP.
pop3: Filter on POP3.
mapi: Filter on MAPI. (Proxy mode only.)
cifs: Filter on CIFS.
ssh: Filter on SFTP and SCP. (Proxy mode only.)
 option -
action Action taken for matched file.
log-only: Allow the content and write a log message.
block: Block the content and write a log message.
 option -
direction Traffic direction. (HTTP, FTP, SSH, CIFS only)
incoming: Match files transmitted in the session's reply direction.
outgoing: Match files transmitted in the session's originating direction.
any: Match files transmitted in the session's originating and reply directions.
 option -
password-protected Match password-protected files.
yes: Match only password-protected files.
any: Match any file.
 option -
file-type <name> Select file type.
File type name.		 string Maximum length: 39
Previous
Next