How do I configure heuristic scanning?

• All FortiGate running FortiOS 2.8 or 3.0.

The FortiGate heuristic antivirus engine performs tests on files to detect virus-like behavior or known virus indicators. Heuristic scanning is performed last, after file blocking and virus scanning have found no matches. In this way, heuristic scanning may detect new viruses, but may also produce some false positive results.

To configure heuristic scanning

1. Connect to the CLI.
2. Enter the following:
   config antivirus heuristic
   set mode {pass|block|disable}
     end

To configure heuristic settings on models 200 and higher

1. Connect to the CLI.
2. Enter the following:
   config antivirus quarantine
   set drop_heuristic {ftp http imap pop3 smtp}
   set store_heuristic {ftp http imap pop3 smtp}
     end

See also How do I enable heuristic scanning?