Archives are unpacked and files and archives within are scanned separately.
Decompressed files have a separate oversize limit.
Limit can be configured for each protocol separately.
Respuesta
compressed archives are supported (default is 12 layers) maximum 100 usually.
compressed archives are supported (default is 21 layers) maximum 1000 usually.
compressed archives are supported (default is 100 layers) maximun 1000 usually.
Pregunta 2
Pregunta
What is the default scanning behavior for files over 10MB?
Respuesta
A. Allow the file without scanning.
B. Block all large files that exceed the buffer threshold.
Pregunta 3
Pregunta
How do you enable botnet protection?
Respuesta
A. Enable botnet scans under FortiSandbox configuration.
B. Enable botnet scans on external (WAN) facing interfaces.
Pregunta 4
Pregunta
FortiGate models that feature NTurbo (NP4 or NPS) can accelerate antivirus processing to enhance performance.
SoC3 models also support NTurbo
Respuesta
Config ips global
set np-accel-mode {none | basic } (Enable NTurbo acceleration
Config av global
set np-accel-mode {none | basic } (Enable NTurbo acceleration
Pregunta 5
Pregunta
Can you use NTurbo hardware acceleration for proxy-based inspection mode antivirus scans?
Respuesta
Yes
No
Pregunta 6
Pregunta
What does the logging of oversized files option do?
Respuesta
A. Enables logging of all files that cannot be scanned due to oversize limit.
B. Logs all files that are over 5MB.
Pregunta 7
Pregunta
Run the real-time update debug to isolate update-related issues.