Selecting the antivirus profile in a security policy
An antivirus profile directs the FortiGate unit to scan network traffic only when it is selected in a security policy. When an antivirus profile is selected in a security policy, its settings are applied to all the traffic the security policy handles.
To select the antivirus profile in a security policy — web-based manager
1. Go to Policy > Policy > Policy.
2. Create a new or edit a security policy.
3. Turn on Antivirus.
4. Select an antivirus profile.
5. Select OK to save the security policy.
To select the antivirus profile in a security policy — CLI
config firewall policy
edit 1
set utm-status enable
set profile-protocol-options default
set av-profile basic_antivirus
end
HTTP, IMAP, POP3, and SMTP traffic handled by the security policy you modified will be scanned for viruses. A small office may have only one security policy configured. If you have multiple policies, consider enabling antivirus scanning for all of them.