Hi, I have attached Antivirus filter to the policy and trying to test if filter is applied correctly but looks like the file is getting downloaded without any issue. Below is the sample configuration. I tried both, proxy and flow based configurations but no luck. I am using FG version 6.0.8 Please advice what could be the issue.
config antivirus profile
edit "default"
set comment "Scan files and block viruses."
set inspection-mode proxy
config http
set options scan
end
config ftp
set options scan
end
config imap
set options scan
set executables virus
end
config pop3
set options scan
set executables virus
end
config smtp
set options scan
set executables virus
end
config mapi
set executables virus
--More-- end
config nntp
set options scan
end
next
end
Hi Prasanth.
Once you have created a antivirus profile, it needs to be applied to outgoing traffic via a firewall policy. From what you have posted, it doesn't look like the antivirus profile can cover encrypted traffic (e.g. HTTPS or port 443).
NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Hello Dave ,
Thank you for reply.
could you please assist me to configure correctly of Antivirus profile.
I haven't seen such errors in antivirus please contact the official support.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.