If you have purchased and enabled the Gateway AntiVirus feature, the fields in the AntiVirus category set the actions necessary if a virus is found in a file that is uploaded or downloaded.
- To use the proxy definition screens to activate Gateway AntiVirus, see Activate Gateway AntiVirus from Proxy Definitions.
- To use the Subscription Services menu in Policy Manager to activate Gateway AntiVirus, see Activate Gateway AntiVirus with a Wizard from Policy Manager.
- To configure Gateway AntiVirus for the FTP-proxy, see Configure Gateway AntiVirus Actions.
When you enable Gateway AntiVirus, you must set the actions to be taken if a virus or error is found in an uploaded or downloaded file. The options for antivirus actions are:
Allows the packet to go to the recipient, even if the content contains a virus.
Deny the file and send a deny message.
Drops the packet and drops the connection. No information is sent to the source of the message.
Blocks the packet, and adds the IP address of the sender to the Blocked Sites list.
Gateway AntiVirus scans each file up to a specified kilobyte count. Any additional bytes in the file are not scanned. This allows the proxy to partially scan very large files without a large effect on performance. Enter the file scan limit in the Limit scanning to first field.
For information about the default and maximum scan limits for each Firebox model, see About Gateway AntiVirus Scan Limits.