4.2.4 Enable AI /heuristic based malware detection

Information

AI /heuristic based detection should be enabled.

The AV Engine AI malware detection model integrates into regular AV scanning to help detect potentially malicious Windows Portable Executables (PEs) in order to mitigate zero-day attacks. It is an additional layer of protection on top of traditional antivirus protection.

In version 6.x, it is named "Heuristic detection". On version 7.x, Fortinet has renamed this to AI based detection.

Solution

On CLI:

FGT1 # config antivirus settings
FGT1 (settings) # set machine-learning-detection enable

See Also

https://workbench.cisecurity.org/benchmarks/15284

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv7|8.1, CSCv7|8.2, CSCv7|8.3

Plugin: FortiGate

Control ID: d83c64f7818f6a7e12005684d6cad3933385517e029ecda7027d2267f7e6c474