Antivirus : [ Antivirus Function Profile ]

Here we create a profile of the UTM Antivirus Function being utilized at a Firewall Policy.
At the Antivirus Profile, you can inactivate the antivirus function including a protocol for each protocol, activate one to block any viruses, or activate one only to detect viruses without any block.
The maximum file size being detected by the Antivirus Function should be specified at the Scan Ports Profile.

Antivirus Profile Default Value

When your clicking [ Antivirus ] by default, the default Antivirus Profile will display.
既定のAntivirusプロファイル

The Antivirus _Monitor executes only the virus detection at all the protocols; Whereas the Antivirus_Block executes both virus detection and virus blocking at all the protocols.
Besides, you can utilize the default Antivirus Profile itself as well as you can modify it to your unique definition.

Antivirus Profile : Setting Items

Following explain the setting items of Antivirus Profile.

Items

Values

Descriptions

Profile Name

(Half-width alphabetical characters and half-width numbers)

Enter the name of profile.
You can not utilize any two-byte characters, such as Japanese, and the following signs as described below:
< > ( ) # ' " Space (blank)

Detecting Botnet C&C Server

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior in the case the Antivirus function detects any communication to the C&C server.

HTTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to HTTP.

FTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior for FTP.

SMTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior for SMTP.

POP3

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to POP3.

IMAP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to IMAP.

MAPI

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior for MAPI (MAPI / RPC).

NNTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to NNTP.

Comment

(Half-width alphabetical characters and half-width numbers)

Fill in your comments, if desired.
The maximum 225-words are available. You can NOT use any 2-byte characters, such as Japanese.


Antivirus Profile Addition.

  1. Click Antivirus from the left-side Object screen.
    Object ‣ Security Profile ‣ Antivirus ‣ Antivirus

    Click [ Add ] at Antivirus of the right-side screen.

    Click Add


  1. Click [ Save ] after you input a setting value.
    Please refer to Antivirus Profile : Setting Items , for more information on the setting items.

    Save Object


  1. Apply configuration to the device by clicking [Save].

    Save Config


Note

  • Please be sure to execute [Save Changes] in Profile before create Firewall policy.



Antivirus Profile Modification : [ Edit / Depulicate / Remove ]

  1. Click Antivirus from the left-side Object screen.
    Object ‣ Security Profile ‣ Antivirus ‣ Antivirus

    Select a target changed line at the right-side Antivirus screen, and click the relevant task button that you need to operate.

    Click Change


    Following describes respective buttons of Antivirus .

    Buttons

    Descriptions

    "Edit"

    Modify the value at Antivirus Profile that has already been set.

    "Duplicate"

    After deplicating the existing rp_change_object|, the object setting screen will open with the same value.
    Make sure to change Profile Name .
    This is useful for you to define another Antivirus Profile with a same value.

    "Remote"

    Delete your selected Antivirus Profile .


    When your deleting one, the confirmation message will display. Please click [OK] to finally execute its deletion.

    Confirm Delete Object

    NOTE: You can not remove any object, which has been utilizing at a Firewall Policy.


  1. Apply configuration to the device by clicking [Save].

    Save Config


Note

  • Please be sure to execute [Save Changes] in Profile before create Firewall policy.