FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Not applicable
Article Id 196185
Article

Description

How to perform antivirus scanning on non-standard TCP ports.

Components

  • All FortiGate units
  • FortiOS 2.80 and 3.0

Steps or Commands

The following is the default list of standard protocols and associated ports that can be scanned by the Fortigate:

FTP - TCP 21
SMTP - TCP 25
HTTP - TCP 80
POP3 - TCP 110
IMAP - TCP 143

The Fortigate can also be configured to scan these protocols, but on different ports. This is configured via the CLI.

FortiOS Version 3.0

config antivirus service http
   set port 8080
end

FortiOS Version 2.80

config antivirus service http
    set port 8080
    show
   config antivirus service "http"
       set memfilesizelimit 10
       set port 80
        set port 8080
       set uncompsizelimit 10
    end
end


Related Articles

Technical Note : Configuring FortiGate Protocol Recognition to scan traffic on non-standard port - F...