config : system fortiguard antispam
 
system fortiguard antispam
Use this command to configure how the FortiMail unit will connect to the FortiGuard servers to query for antispam signatures. Unlike the antivirus updates, FortiMail cannot query FortiGuard antispam service via a web proxy. If there is a web proxy before FortiMail, you have to use a FortiManager unit locally as an override server.
Syntax
config system fortiguard antispam
set cache-mpercent <percentage_int>
set cache-status {enable | disable}
set cache ttl <ttl_int>
set hostname {<fqdn_str> | <host_ipv4>}
set port {53 | 8888 | 8889}
set query-timeout <timeout_int>
set server-override-ip <ipv4>
set server-override-status {enable | disable}
set status {enable | disable}
set uri-redirect-lookup {enable | disable}
end
 
Variable
Description
Default
cache-mpercent <percentage_int>
Enter the percentage of memory the antispam cache is allowed to use in percentage. The range is 1-15%.
2
cache-status {enable | disable}
Enable to query to the FortiGuard Distribution Network (FDN) for FortiGuard Antispam ratings.
This option must be enabled for antispam profiles where the FortiGuard Antispam scan is enabled to have an effect.
enable
cache ttl <ttl_int>
Enter the time to live (TTL) in seconds for cache entries.
300
hostname {<fqdn_str> | <host_ipv4>}
Enter an IP address or a fully qualified domain name (FQDN) to override the default FortiGuard Antispam query server.
antispam.fortigate.com
port {53 | 8888 | 8889}
Enter the port number used to communicate with the FortiGuard Antispam query servers.
53
query-timeout <timeout_int>
Enter the timeout value for the FortiMail unit to query the FortiGuard Antispam query server.
7
server-override-ip <ipv4>
If server-override-status is enable, enter the IP address of the public or private FortiGuard Antispam query server that overrides the default query server to which the FortiMail unit connects.
 
server-override-status {enable | disable}
Enable to override the default FortiGuard Antispam query server to which the FortiMail unit connects to and checks for antispam signatures.
disable
status {enable | disable}
Enable to allow the FortiMail unit to query the FortiGuard antispam service.
enable
uri-redirect-lookup {enable | disable}
If an email contains a shortened URI that redirects to another URI, the FortiMail unit is able to send a request to the shortened URI to get the redirected URI and scan it against the FortiGuard AntiSpam database. By default, this function is enabled. To use it, you need to open your HTTP port to allow the FortiMail unit to send request for scanning the redirected URI.
enable
Related topics
system fortiguard antivirus
update
debug application updated