Antivirus
CLI configuration
FortiGate-1000A/FA2 Administration Guide
01-28011-0254-20051115
327
config antivirus service smtp
Use this command to configure how the FortiGate unit handles antivirus scanning of
large files in SMTP traffic, what ports the FortiGate unit scans for SMTP, and how the
FortiGate unit handles interaction with an SMTP server for delivery of email with
infected email file attachments.
Command syntax pattern
config antivirus service smtp
set <keyword> <variable>
end
config antivirus service smtp
unset <keyword>
end
get antivirus service [smtp]
show antivirus service [smtp]
How file size limits work
See
“How file size limits work” on page 321
.
antivirus service smtp command keywords and variables
Keywords and
variables
Description
Default
Availability
memfilesizelimit
<MB_integer>
Set the maximum file size that can be
buffered to memory for virus scanning.
The maximum file size allowed is 10% of the
FortiGate RAM size. For example, a
FortiGate unit with 256 MB of RAM could
have a threshold range of 1 MB to 25 MB.
Note: For email scanning, the
memfilesizelimit refers to the final size of the
email after encoding by the email client,
including attachments. Email clients may use
a variety of encoding types and some
encoding types translate into larger file sizes
than the original attachment. The most
common encoding, base64, translates 3
bytes of binary data into 4 bytes of base64
data. So a file may be blocked or logged as
oversized even if the attachment is several
megabytes less than the memfilesizelimit.
10
(MB)
All models.
port
<port_integer>
Configure antivirus scanning on a
nonstandard port number or multiple port
numbers for SMTP. You can use ports from
the range 1-65535. You can add up to 20
ports.
143
All models.
uncompsizelimit
<MB_integer>
Set the maximum uncompressed file size
that can be buffered to memory for virus
scanning. Enter a value in megabytes
between 1 and the total memory size. Enter
0 for no limit (not recommended).
10
(MB)
All models.
Summary of Contents for FortiGate 1000A
Page 80: ...80 01 28011 0254 20051115 Fortinet Inc FortiGate IPv6 support System Network ...
Page 88: ...88 01 28011 0254 20051115 Fortinet Inc Dynamic IP System DHCP ...
Page 122: ...122 01 28011 0254 20051115 Fortinet Inc FortiManager System Config ...
Page 248: ...248 01 28011 0254 20051115 Fortinet Inc Protection profile Firewall ...
Page 260: ...260 01 28011 0254 20051115 Fortinet Inc CLI configuration User ...
Page 380: ...380 01 28011 0254 20051115 Fortinet Inc CLI configuration Log Report ...
Page 392: ...392 01 28011 0254 20051115 Fortinet Inc Glossary ...
