questions about File filter

[benny]

Hi bro,

May I know the meaning of the below items in fortigate file filter?

1) Scan archive contents

2) Password-protected only

I cannot find the definition about these two items in fortigate guide.

[lol]

Hello,

If this question is about FortiGate then please refer to the CLI guide
https://docs.fortinet.com/document/fortigate/7.0.0/cli-reference/534620/config-file-filter-profile

scan-archive-contents
Enable/disable archive contents scan.

password-protected
Match password-protected files.

The options for password-protected are
yes Match only password-protected files.
any Match any file.

Basically you can define if you want to scan archives, i.e. ZIP files by unpacking them.
And how to handle encrypted files that cannot be scanned without the required password to decrypt them.

Best Regards