< Home

file-frame decompress size

Function

The file-frame decompress size command sets the maximum size of decompressed files for file blocking.

The undo file-frame decompress size command restores the default configuration.

Format

file-frame decompress size file-size

undo file-frame decompress size

Parameters

Parameter Description Value

file-size

Specifies the maximum size of decompressed files.

The value is an integer ranging from 1 to 200, in MB. The default value is 100 MB.

For the compressed files in 7ZIP and RAR formats, the maximum decompression file size of the USG6510E/6510E-POE is 1M, and the maximum value of this parameter can only be set to 1M. The default maximum decompression file size of other models except the preceding models is 10M, and the maximum value of this parameter can only be set to 10M.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

The FW can filter a decompressed file based on file content if the size of the file is smaller than or equal to the file-size value. The FW can process oversize compressed files.

The FW detects compressed file by flow and implements decompression and content security detection simultaneously. If a data flow contains threat information, the FW processes the flow based on the content security configuration. If the data flow is secure and the file size exceeds the specified value, the FW will take the action set using the file-frame decompress size action command for the situation in which the maximum size of decompressed files is exceeded:

  • Allow: Allows the file transfer. This is the default action.

  • Alert: Allows the file transfer and generates a log.

  • Block: Blocks the file transfer and generates a log.

Example

# Set the maximum size of decompressed files in file blocking to 200 MB.

<sysname> system-view
[sysname] file-frame decompress size 200
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >