Archives are unpacked and files and archives within are scanned separately.
Decompressed files have a separate oversize limit.
Limit can be configured for each protocol separately.
Responda
compressed archives are supported (default is 12 layers) maximum 100 usually.
compressed archives are supported (default is 21 layers) maximum 1000 usually.
compressed archives are supported (default is 100 layers) maximun 1000 usually.
Questão 2
Questão
What is the default scanning behavior for files over 10MB?
Responda
A. Allow the file without scanning.
B. Block all large files that exceed the buffer threshold.
Questão 3
Questão
How do you enable botnet protection?
Responda
A. Enable botnet scans under FortiSandbox configuration.
B. Enable botnet scans on external (WAN) facing interfaces.
Questão 4
Questão
FortiGate models that feature NTurbo (NP4 or NPS) can accelerate antivirus processing to enhance performance.
SoC3 models also support NTurbo
Responda
Config ips global
set np-accel-mode {none | basic } (Enable NTurbo acceleration
Config av global
set np-accel-mode {none | basic } (Enable NTurbo acceleration
Questão 5
Questão
Can you use NTurbo hardware acceleration for proxy-based inspection mode antivirus scans?
Responda
Yes
No
Questão 6
Questão
What does the logging of oversized files option do?
Responda
A. Enables logging of all files that cannot be scanned due to oversize limit.
B. Logs all files that are over 5MB.
Questão 7
Questão
Run the real-time update debug to isolate update-related issues.