Chapter 15 Unified Threat Management for FortiOS 5.0 : Other Security Profiles considerations : Conserve mode : Configuring the av-failopen command
  
Configuring the av-failopen command
You can configure the av-failopen command using the CLI.
config system global
set av-failopen {off | pass | one-shot | idledrop}
end
The default setting is pass.