Antivirus protection
Antivirus protection is enabled in firewall policies. When you enable antivirus protection for a firewall policy, you select a content profile that controls how the antivirus protection behaves. Content profiles control the type of traffic protected (HTTP, FTP, IMAP, POP3, SMTP), the type of antivirus protection and the treatment of fragmented email and oversized files or email.
This chapter describes:
•General configuration steps
•Antivirus scanning
•File blocking
•Blocking oversized files and emails
•Exempting fragmented email from blocking
•Viewing the virus list
General configuration steps
Configuring antivirus protection involves the following general steps.
1Select antivirus protection options in a new or existing content profile. See “Adding a content profile” on page 170.
2Select the
3Configure antivirus protection settings to control how the FortiGate unit applies antivirus protection to the web, FTP, and email traffic allowed by policies. See:
•“Antivirus scanning” on page 232,
•“File blocking” on page 233,
•“Blocking oversized files and emails” on page 234,
•“Exempting fragmented email from blocking” on page 234.
4Configure the messages that users receive when the FortiGate unit blocks or deletes an infected file. See “Customizing replacement messages” on page 136.
5Configure the FortiGate unit to send an alert email when it blocks or deletes an infected file. See “Configuring alert email” in the Logging and Message Reference Guide.
Note: To receive virus log messages, see “Configuring logging”, and for information about log message content and format, see “Virus log messages” in the Logging Configuration and Reference Guide
231 |
