Performing antivirus scanning non-standard TCP ports

Description

Components

• All FortiGate units
• FortiOS 2.80 and 3.0

Steps or Commands

The following is the default list of standard protocols and associated ports that can be scanned by the Fortigate:

FTP - TCP 21
SMTP - TCP 25
HTTP - TCP 80
POP3 - TCP 110
IMAP - TCP 143

The Fortigate can also be configured to scan these protocols, but on different ports. This is configured via the CLI.

FortiOS Version 3.0

config antivirus service http
   set port 8080
end

FortiOS Version 2.80

config antivirus service http
    set port 8080
    show
   config antivirus service "http"
       set memfilesizelimit 10
       set port 80
        set port 8080
       set uncompsizelimit 10
    end
end