file-frame decompress depth action

Function

The file-frame decompress depth action command sets the action for the decompressed files with more than the specified decompression layers.

The undo file-frame decompress depth action command restores the default configuration.

Format

file-frame decompress depth action { alert | allow | block }

undo file-frame decompress depth action

Parameters

Parameter	Description	Value
alert	Allows the file transfer and generates a log.	-
allow	Allows the file transfer.	-
block	Blocks the file transfer and generates a log.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

The default action is allow for the files exceeding the specified maximum decompression layers.

The FW detects compressed file by flow and implements decompression and content security detection simultaneously. If a data flow contains threat information, the FW processes the flow based on the content security configuration. If the data flow is secure and the decompression depth of a file exceeds the value specified using the file-frame decompress depth decompress-depth command, the FW takes the action set using the file-frame decompress depth action command.

Example

# Set the action to alert for the files whose decompression depth exceeds the specified value.

<sysname> system-view
[sysname] file-frame decompress depth action alert