2022-09-08 13:28:46 +00:00
id : heuristic-scan
info :
2023-07-06 05:22:54 +00:00
name : Fortinet Heuristic Scanning not Configured - Detect
2022-09-08 13:28:46 +00:00
author : pussycat0x
severity : info
2023-07-05 03:24:47 +00:00
description : |
Fortinet heuristic scanning configuration is advised to thwart attacks. Heuristic scanning is a technique used to identify previously unknown viruses. A value of block enables heuristic AV scanning of binary files and blocks any detected. A replacement message is forwarded to the recipient, and blocked files are quarantined if quarantine is enabled.
2022-09-08 13:28:46 +00:00
reference : https://docs.fortinet.com/document/fortigate/6.2.0/hardening-your-fortigate/582009/system-administrator-best-practices
2023-05-03 22:11:51 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
2023-10-14 11:27:55 +00:00
cvss-score : 0
2023-05-03 22:11:51 +00:00
cwe-id : CWE-200
2023-04-14 14:27:45 +00:00
tags : audit,config,file,firewall,fortigate
2023-12-14 03:56:01 +00:00
2022-09-08 13:28:46 +00:00
file :
- extensions :
- conf
matchers-condition : and
matchers :
- type : word
words :
- "config antivirus heuristic"
- "set mode block"
negative : true
- type : word
words :
- "config system"
- "config router"
- "config firewall"
2023-04-14 14:27:45 +00:00
condition : or
2024-01-04 06:57:22 +00:00
# digest: 4b0a00483046022100f4ec56fac28c66a16f4465dc3f38dfa1e32914d9a9f4a920eecfcd7531fd8eb1022100ded6bebd35754564f8d3f44d45f442fd0e8b1bd377f5da1d2013659cc8eea484:922c64590222798bb761d5b6d8e72950
