Enable Gateway AntiVirus with a Wizard

To enable Gateway AntiVirus actions in multiple proxy policies you can use a wizard in Policy Manager or Fireware Web UI. When you use a wizard to enable Gateway AntiVirus for proxy policies, the wizard configures the policies to scan allowed traffic for viruses. To do this, the wizard configures rules in the proxy action to use the AV Scan action instead of the Allow action.

If you use the wizard to create an SMTP policy, the wizard creates a default SMTP proxy policy, which uses static NAT. To create this default SMTP proxy policy, your Firebox must have at least one external interface with a static IP address or PPPoE. The wizard adds only one policy even if you have more than one external interface. The To list of the policy has a static NAT entry, (the static IP address of the first external interface to the specified email service IP address). If this default policy does not meet your requirements, add the SMTP proxy policy before you use this wizard to enable Gateway AntiVirus.

  1. From Fireware Web UI, select Subscription Services > Gateway AV.
  2. Click Run Wizard.
    The wizard Welcome page appears.

Screen shot of the Gateway AntiVirus Activation Wizard welcome page

  1. Click Next.
  2. Select the existing proxy policies that do not have Gateway AntiVirus enabled. You cannot select a policy that is disabled or that already has Gateway AntiVirus enabled.

Screen shot of the Apply Gateway AntiVirus settings to your policies step in Fireware Web UI

  1. Click Next.
  2. Select any additional proxy policies you want the wizard to add with Gateway AntiVirus enabled. You cannot use the wizard to add a proxy policy of a type that already exists.

Screen shot of the Create new proxy policies step in Fireware Web UI

  1. If you select Incoming SMTP, specify the email server IP address.
  2. Click Next to complete the wizard.
  1. From WatchGuard System Manager, select the Firebox on which you want to use Gateway AntiVirus.
  2. Click the Policy Manager icon.
    Or, select Tools > Policy Manager.
    Policy Manager appears for the selected device.
  3. Select Subscription Services > Gateway AntiVirus > Activate.
    The Activate Gateway AntiVirus wizard starts.

Screen shot of the Activate Gateway AntiVirus wizard welcome page

  1. Click Next.
  2. Select the existing proxy policies that do not have Gateway AntiVirus enabled. You cannot select a policy that is disabled or that already has Gateway AntiVirus enabled.

Screen shot of the Activate Gateway AntiVirus Wizard dialog box in Policy Manager

  1. Click Next.
  2. Select any additional proxy policies you want the wizard to add with Gateway AntiVirus enabled. You cannot use the wizard to add a proxy policy of a type that already exists.

Screen shot of the Activate Gateway AntiVirus wizard dalog box

  1. If you select Incoming SMTP, specify the email server IP address.
  2. Click Next to complete the wizard.

The wizard enables Gateway AntiVirus with default settings in the proxy actions you selected.

To further customize your Gateway AntiVirus configuration you can:

Related Topics

About Gateway AntiVirus

Video tutorial: Getting Started with Gateway AntiVirus