Content Disarm and reconstruction

This has helped me
https://cookbook.fortinet.com/content-disarm-reconstruction-60/
 
Good Luck

   With 6.0.4 I too am having the problem where when I try to enable "Content Disarm and Reconstruction" in the Security Profiles - AntiVirus, I get the message: "Value conflicts with system settings".  This is when logged into the Global VDOM.  (The root VDOM didn't give me an Apply button to save changes so I'm assuming that I need to be in the Global VDOM).
 
    I tried to follow the instructions from Alivo which didn't work exactly.  I can't use the "config firewall profile-protocol-options" for the "config global".  I need to be in my root VDOM.  But even from here after I removed splice from SMTP (and I didn't see clientcomfort anywhere) I couldn't enable the "Content Disarm and Reconstruction" in the GUI.
 
   Here are my settings for the root VDOM:
config firewall profile-protocol-options
edit "default"
set comment "All services."
config http
set ports 80
unset options
unset post-lang
end
config ftp
set ports 21
set options splice
end
config imap
set ports 143
set options fragmail
end
config mapi
set ports 135
set options fragmail
end
config pop3
set ports 110
set options fragmail
end
config smtp
set ports 25
set options fragmail splice
end
config nntp
set ports 119
set options splice
end
config dns
set ports 53
end
next
edit "custom-default"
set comment "All default services."
config http
set ports 80
unset options
unset post-lang
end
config ftp
set ports 21
set options splice
end
config imap
set ports 143
set options fragmail
end
config mapi
set ports 135
set options fragmail
end
config pop3
set ports 110
set options fragmail
end
config smtp
set ports 25
set options fragmail
end
config nntp
set ports 119
set options splice
end
config dns
set ports 53
end
next
end
 
   Any idea of how I can enable "Content Disarm and Reconstruction" for my root VDOM?
 
Thanks!
 

I'm also having this same issue. When I run the command "unset options splice" it gives the error - "command parse error before 'splice'. command fail. return code -61"
 
Any ideas?

Hello,
 
same configuration that dbaddorf and same error. Version 6.0.6. I created a new profile protocol with all options disabled and same result.
 
Did you figure out how to enabled it?
 
 

most likely you need to add an exception