Skip to main content
benny
New Member
May 3, 2022
Question

questions about File filter

  • May 3, 2022
  • 1 reply
  • 1336 views

Hi bro,

 

May I know the meaning of the below items in fortigate file filter?

 

1) Scan archive contents

2) Password-protected only

 

I cannot find the definition about these two items in fortigate guide.

1 reply

lol
Staff
Staff
May 4, 2022

Hello,


If this question is about FortiGate then please refer to the CLI guide
https://docs.fortinet.com/document/fortigate/7.0.0/cli-reference/534620/config-file-filter-profile

 

scan-archive-contents
Enable/disable archive contents scan.

 

 

password-protected
Match password-protected files.

 

The options for password-protected are
yes Match only password-protected files.
any Match any file.

 

Basically you can define if you want to scan archives, i.e. ZIP files by unpacking them.
And how to handle encrypted files that cannot be scanned without the required password to decrypt them.

 


Best Regards

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.