file-set

Function

The file-set command sets sizes for different types of files to be sent to a local sandbox or a cloud sandbox for detection.

The undo file-set command restores the default setting.

Format

file-set { exe | office | gzip | pdf | picture | web | media | other } max-size max-file-size

undo file-set { exe | office | gzip | pdf | picture | web | media | other }

Parameters

Parameter	Description	Value
exe	Indicates executable files.	-
office	Indicates Microsoft office files.	-
gzip	Indicates compressed files.	-
pdf	Indicates PDF files.	-
picture	Indicates image files.	-
web	Indicates web page files.	-
media	Indicates media files.	-
other	Indicates other files.	Other file types include CMD, VBE, RB, PY, POWERSHELL, JSE, WSF, LNK, TXT, and PSD.
max-file-size	Specifies the sizes of files to be sent to the sandbox for detection.	The value is a string that varies according to the file type: For the local sandbox: For USG6530E, USG6515E, USG6525E, USG6550E/6560E/6580E, USG6555E/6565E/6575E-B/6585E/6605E-B: For exe files: The value ranges from 0 to 10240, in KB. The default value is 2048 KB. For gzip files: The value ranges from 0 to 10240, in KB. The default value is 2048 KB. For office files: The value ranges from 0 to 2048, in KB. The default value is 2048 KB. For pdf files: The value ranges from 0 to 5120, in KB. The default value is 2048 KB. For picture files: The value ranges from 0 to 5120, in KB. The default value is 200 KB. For web files: The value ranges from 0 to 500, in KB. The default value is 200 KB. For media files: The value ranges from 0 to 10240, in KB. The default value is 2048 KB. For other files: The value ranges from 0 to 5120, in KB. The default value is 200 KB. For USG6615E/6625E, USG6610E/6620E, USG6630E, USG6650E, USG6635E/6655E, USG6680E, USG6712E/6716E: For exe files: The value ranges from 0 to 51200, in KB. The default value is 2048 KB. For gzip files: The value ranges from 0 to 51200, in KB. The default value is 2048 KB. For office files: The value ranges from 0 to 51200, in KB. The default value is 2048 KB. For pdf files: The value ranges from 0 to 51200, in KB. The default value is 2048 KB. For picture files: The value ranges from 0 to 5120, in KB. The default value is 200 KB. For web files: The value ranges from 0 to 500, in KB. The default value is 200 KB. For media files: The value ranges from 0 to 51200, in KB. The default value is 2048 KB. For other files: The value ranges from 0 to 5120, in KB. The default value is 200 KB. For the cloud sandbox: For exe files: The value ranges from 0 to 10240, in KB. The default value is 2048 KB. For gzip files: The value ranges from 0 to 10240, in KB. The default value is 2048 KB. For office files: The value ranges from 0 to 2048, in KB. The default value is 2048 KB. For pdf files: The value ranges from 0 to 5120, in KB. The default value is 2048 KB.

Views

Local sandbox view, Cloud sandbox view

Default Level

2: Configuration level

Usage Guidelines

The FW can select the files to be sent to the local sandbox or the cloud sandbox based on file sizes.

If the size of a file exceeds max-file-size, the FW will not send the file to the local sandbox or the cloud sandbox for detection. Instead, the FW processes or forwards the file.

Changing the max-file-size value affects the detection performance of the local sandbox or the cloud sandbox. You are advised to use the default value of max-file-size for general use.

picture, web, media, and other take effect only for the local sandbox. The cloud sandbox does not support detecting image, web page, media, or other files.

Example

# Set the maximum size to 4096 KB for executable files to be sent to a local sandbox for detection.

<sysname> system-view
[sysname] sandbox default
[sysname-sandbox-default] file-set exe max-size 4096

# Restore the maximum size to the default value for PDF files to be sent to a local sandbox for detection.

<sysname> system-view
[sysname] sandbox default
[sysname-sandbox-default] undo file-set pdf

# Set the maximum size to 4096 KB for executable files to be sent to a cloud sandbox for detection.

<sysname> system-view
[sysname] sandbox cloud
[sysname-sandbox-cloud] file-set exe max-size 4096

# Restore the maximum size to the default value for PDF files to be sent to a cloud sandbox for detection.

<sysname> system-view
[sysname] sandbox cloud
[sysname-sandbox-cloud] undo file-set pdf