Configure Virus Outbreak Detection Actions

Virus Outbreak Detection is supported in Fireware v12.1.3 and lower, and Fireware v12.2.x to Fireware v12.5.3.

Virus Outbreak Detection (VOD) identifies and blocks spam messages that contain viruses.

To configure Virus Outbreak Detection actions, from Fireware Web UI:

  1. Select Subscription Services > spamBlocker.
  2. Make sure Virus Outbreak Detection is enabled:
  3. In the spamBlocker configuration, select a proxy policy and click Configure.
  4. Select the Virus Outbreak Detection tab.

Screen shot of the Virus Outbreak Detection tab

  1. From the When a virus is detected drop-down list, select the action the Firebox takes if VOD detects a virus in an email message.
  2. From the When a scan error occurs drop-down list, select the action the Firebox takes when VOD cannot scan an email message or attachment.
    Attachments that spamBlocker cannot scan include binhex-encoded messages, certain encrypted files, or files that use a type of compression that spamBlocker does not support, such as password-protected zip files.
  3. To send a log message when spamBlocker detects a virus or when a scan error occurs, select the Log this action check boxes.
  4. To send an alarm when spamBlocker detects a virus or when a scan error occurs, select the Alarm check boxes.

To configure Virus Outbreak Detection actions, from Policy Manager:

  1. Select Subscription Services > spamBlocker > Configure.
  2. Make sure Virus Outbreak Detection is enabled:
  3. In the spamBlocker configuration, select a proxy policy. Click Configure.
  4. Select the Virus Outbreak Detection tab.

Screen shot of the Virus Outbreak Detection actions

  1. From the When a virus is detected drop-down list, select the action the Firebox takes if VOD detects a virus in an email message.
  2. From the When a scan error occurs drop-down list, select the action the Firebox takes when VOD cannot scan an email message or attachment.
    Attachments that spamBlocker cannot scan include binhex-encoded messages, certain encrypted files, or files that use a type of compression that spamBlocker does not support, such as password-protected zip files.
  3. To send a log message when a virus is detected or when a scan error occurs, select the Log this action check boxes.
  4. To send an alarm when a virus is detected or when a scan error occurs, select the Alarm check boxes.

The SMTP-proxy supports the Allow, Lock, Remove, Quarantine, Deny, Drop, and Block actions. The POP3 and IMAP-proxies support only the Allow, Lock, and Remove actions. For more information on these actions, see spamBlocker Actions, Tags, and Categories.