Technical Tip: How to exempt known safe files that...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 246883

Description

This article describes that sometimes, normal files may be falsely detected by AV signatures and should be excluded from Antivirus scans.

Scope

FortiGate v7.2.4+ GA releases.

Solution

This feature is implemented on the 7.2.4 version and It is supported through the 'antivirus exempt-list' command in CLI.

Antivirus exempt list is for files based on the individual hash.

CLI Setting:

# config antivirus exempt-list

edit <name>

set hash-type {md5 | sha1 | sha256}

set hash <string>

set status {enable | disable}

end

398

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to exempt known safe files that happen to be incorrectly classified as malicious by the Antivirus signature