file/email exceeds size limit

No problems - in V3.00 the setting you need is under Firewall / Protection Profile / Anti-virus - look for the " Oversized File/Email" setting and the " Threshold" . If you have V2.80 there' s something similar but I' ve already forgotten where - definately in protection profiles... For each type of communication, http, ftp, smtp etc you can select what you would like to do with oversized files - block or pass - and the threshold in MB. Depending on your FGT model the limits will be 1-x MB, on my 3000s it' s 1-139MB. These settings are a compromise between safety and performance. For http and ftp downloads I have a threshold of 20MB but set to pass if they are larger, so the first 20MB of all files is scanned, if the file is larger then the remainder is not scanned, but almost all files propagating viruses are small - it makes them efficient, any virus which needs a 20MB file to move around wouldn' t get far - so this isn' t a big problem. For email protocols I have a 30MB limit but block oversized files because most organisations don' t support email bigger than that anyway. <Nomenludi>

Yes, that' s it - unfortunately upgrading to V3.00 will not increase the limit, you can still choose to pass or block oversized files in the different protocols, but you can only choose the amount to scan in the range 1-12MB.

upgrading to V3.00 will not increase the limit, you can still choose to pass or block oversized files in the different protocols, but you can only choose the amount to scan in the range 1-12MB.

...So if it is not scanning files larger than 12mb then why am I experiencing this slow down loading/downloading larger files? I have it set to pass oversize files instead of block. I understand that some of the smaller ' larger' files may be smaller than the 12MB limit I' ve set, so they will take a bit longer to pass through the firewall, since they' re getting scanned by the A/V, but not being able to download Eudora 7 (see image in first post) or stream a flash based video doesn' t seem right. It' s supposed to pass those oversize files, which it will do eventually, but it takes a long time... much longer than it used to before we had the FortiGate. Is there some sort of workaround/solution that I' m not thinking of?

I have a question that' s related to the topic... Is there any way to make exceptions to file size blocking by host/subnet? For example, I have an internal machine that shares media to the network, however, Fortigate applys the same file size restrictions to this machine as it does to machines communicating with the internet. This machine does not connect to the internet itself, so file size restrictions are unnecessary. We are using a FG-800 Thanks Cam

I' m having the same problem... I understand what the setting is for...but if it' s set to PASS above 10MB...then why is ANYTHING being blocked? I' m getting the same file exceeds size limit in the logs...I' ve checked and it' s set to PASS. EDIT: FortiWiFI 60B f/w 3.0 (MR 5 patch 3) It seems that the files are being passed...but as it' s been pointed out...it still writes an entry in the log. HOWEVER, my client has a particular poker program that fails to download the regular updates. I' m thinking it' s because of the hesitation of the download maybe. Any thoughts? Thanks in advance, moose

For some reason, it seems to always tell you in the log that the file is over the size, this is just an alert, regardless of you settings.. so just ignore it. As to the " still slow even on bigger files" , this is because until the fortinet hits the max limit, it doesnt know its oversized. so it usually scans up to the maximim and then sees its oversize and suddenly speeds up (presuming you are not blocking oversized obviously). ie. it starts slow then speeds when its stop av scanning.