Technical Tip: How to set correctly Antivirus for EICAR test

[bkarl]

Description	This article describes the correct way to combine File Filter and Antivirus profile in order to avoid EICAR malicious file access.
Scope	FortiGate v7.4.0.
Solution	Make sure to have a firewall policy set on proxy inspection mode, the Antivirus profile and File Filter are set on proxy mode. In this example, default profile and Deep inspection are enabled. Do not forget to install certificate CA on the PC to protect it. It is possible to test if to go to: https://www.eicar.org/download-anti-malware-testfile/ Download any of the following files and a blocking message like this one will appear: To install certificate Fortinet_CA_SSL: 'Double-click' on the .cert file, select the Install option -> Local PC/Device, place all certificates on the following store, choose the second folder, select next, and then, select 'Finish'.