Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mtellso510
New Contributor II

Forticlient AV exclusions managed by Fortigate

I have a need to exclude files from the forticlient AV real-time scanner.  This is easily done on the endpoints, but if I register the forticlient with a fortigate, this option is no longer available.  Does anyone have any suggestions?

 

An example for what I am trying to do is installing the forticlient on a server and excluding the AV scanner from the spool directory and also the pagefile.

 

1 REPLY 1
Camshaft007
New Contributor

Yea, I'm in the same boat actually.  I need to exclude a "folder" regarding GNS3, however it appears that this should be done via the custom XML.  Unfortunately I'm not very good at XML so my syntax is totally incorrect..

See under exclusions:

<real_time_protection>
            <enabled>1</enabled>
            <use_extreme_db>0</use_extreme_db>
            <when>0</when>
            <ignore_system_when>2</ignore_system_when>
            <on_virus_found>5</on_virus_found>
            <popup_alerts>1</popup_alerts>
            <popup_registry_alerts>0</popup_registry_alerts>
            <cloud_based_detection>
                <on_virus_found>4</on_virus_found>
            </cloud_based_detection>
            <compressed_files>
                <scan>1</scan>
                <maxsize>10</maxsize>
            </compressed_files>
            <riskware>
                <enabled>1</enabled>
            </riskware>
            <adware>
                <enabled>1</enabled>
            </adware>
            <heuristic_scanning>
                <level>0</level>
                <action>3</action>
            </heuristic_scanning>
            <scan_file_types>
                <all_files>0</all_files>
                <file_types>
                    <extensions>.386,.ACE,.ACM,.ACV,.ACX,.ADT,.APP,.ASD,.ASP,.ASX,.AVB,.AX,.AX2,.BAT,.BIN,.BTM,.CDR,.CFM,.CHM,.CLA,.CLASS,.CMD,.CNN,.COM,.CPL,.CPT,.CPY,.CSC,.CSH,.CSS,.DEV,.DLL,.DOC,.DOT,.DRV,.DVB,.DWG,.EML,.EXE,.FON,.GMS,.GVB,.HLP,.HTA,.HTM,.HTML,.HTT,.HTW,.HTX,.HXS,.INF,.INI,.JPG,.JS,.JTD,.KSE,.LGP,.LIB,.LNK,.MDB,.MHT,.MHTM,.MHTML,.MOD,.MPD,.MPP,.MPT,.MRC,.OCX,.PIF,.PL,.PLG,.PM,.PNF,.PNP,.POT,.PPA,.PPS,.PPT,.PRC,.PWZ,.QLB,.QPW,.REG,.RTF,.SBF,.SCR,.SCT,.SH,.SHB,.SHS,.SHT,.SHTML,.SHW,.SIS,.SMM,.SWF,.SYS,.TD0,.TLB,.TSK,.TSP,.TT6,.VBA,.VBE,.VBS,.VBX,.VOM,.VSD,.VSS,.VST,.VWP,.VXD,.VXE,.WBK,.WBT,.WIZ,.WK,.WML,.WPC,.WPD,.WSC,.WSF,.WSH,.XLS,.XML,.XTP</extensions>
                    <include_files_with_no_extension>0</include_files_with_no_extension>
                </file_types>
            </scan_file_types>
            <exclusions>
                <file />
                <folder>
   c:\program files\gns3
     <folder/>
                <file_types>
                    <extensions>.zip,.gzip,.msc,.rar,.tar,.tgz,.lzh,.CAB,.BZIP2,.7Z,.BZIP,.ARJ</extensions>
                </file_types>
            </exclusions>
        </real_time_protection>

" The Linux philosophy is ' Laugh in the face of danger' . Oops. Wrong One. ' Do it yourself' . Yes, that' s it." - Linus Torvalds

" The Linux philosophy is ' Laugh in the face of danger' . Oops. Wrong One. ' Do it yourself' . Yes, that' s it." - Linus Torvalds
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors