From 535f95e6f26dd8cf9bc1a2c33d8542d748606d8f Mon Sep 17 00:00:00 2001
From: John Poland <jdpoland@gmail.com>
Date: Wed, 15 Oct 2025 20:27:19 -0400
Subject: [PATCH] fortigate/vdom_Policy/antivirus.cfg Wed Oct 15 08:27:19 PM
 EDT 2025

---
 configs/fortigate/vdom_Policy/antivirus.cfg | 75 +++++++++++++++++++++
 1 file changed, 75 insertions(+)
 create mode 100644 configs/fortigate/vdom_Policy/antivirus.cfg

diff --git a/configs/fortigate/vdom_Policy/antivirus.cfg b/configs/fortigate/vdom_Policy/antivirus.cfg
new file mode 100644
index 0000000..0b42758
--- /dev/null
+++ b/configs/fortigate/vdom_Policy/antivirus.cfg
@@ -0,0 +1,75 @@
+config antivirus settings
+    set machine-learning-detection enable
+    set grayware enable
+end
+config antivirus profile
+    edit "g-default"
+        set comment "Scan files and block viruses."
+        config http
+            set av-scan block
+        end
+        config ftp
+            set av-scan block
+        end
+        config imap
+            set av-scan block
+            set executables virus
+        end
+        config pop3
+            set av-scan block
+            set executables virus
+        end
+        config smtp
+            set av-scan block
+            set executables virus
+        end
+        set outbreak-prevention-archive-scan disable
+        set external-blocklist-enable-all enable
+    next
+    edit "g-sniffer-profile"
+        set comment "Scan files and monitor viruses."
+        config http
+            set av-scan block
+        end
+        config ftp
+            set av-scan block
+        end
+        config imap
+            set av-scan block
+            set executables virus
+        end
+        config pop3
+            set av-scan block
+            set executables virus
+        end
+        config smtp
+            set av-scan block
+            set executables virus
+        end
+        set outbreak-prevention-archive-scan disable
+        set external-blocklist-enable-all enable
+    next
+    edit "g-wifi-default"
+        set comment "Default configuration for offloading WiFi traffic."
+        config http
+            set av-scan block
+        end
+        config ftp
+            set av-scan block
+        end
+        config imap
+            set av-scan block
+            set executables virus
+        end
+        config pop3
+            set av-scan block
+            set executables virus
+        end
+        config smtp
+            set av-scan block
+            set executables virus
+        end
+        set outbreak-prevention-archive-scan disable
+        set external-blocklist-enable-all enable
+    next
+end