Home >Documents >Security Tutorial v3.0.0 > 2. Operation > 2.2. Managed Firewall / Managed UTM Version2 > 2.2.6. How to Set up a Security Profile >2.2.6.1. Antivirus : [ Antivirus Function Profile ]

2.2.6.1. Antivirus : [ Antivirus Function Profile ]

Here we create a profile of the UTM Antivirus Function being utilized at a Firewall Policy.

At the Antivirus Profile, you can inactivate the antivirus function including a protocol for each protocol, activate one to block any viruses, or activate one only to detect viruses without any block.

The maximum file size being detected by the Antivirus Function should be specified at the Scan Ports Profile.

2.2.6.1.1. Default Value

When your clicking [ Antivirus ] by default, the default Antivirus Profile will display.

AntiVirus_Monitor, __upg_AntiVirus_Monitor only detect on all protocols, AntiVirus_Block, __upg_AntiVirus_Block detect and block on all protocols.

In addition, the profile with __upg notation at the beginning outputs the HTTP header as a log when HTTP communication is detected. See here for more information.

Besides, you can utilize the default Antivirus Profile itself as well as you can modify it to your unique definition.

2.2.6.1.2. Antivirus Profile : Setting Items

Following explain the setting items of Antivirus Profile.

Items	Values	Descriptions
Profile Name	（Half-width alphabetic characters & half-width numbers)	Enter the name of profile. You can NOT utilize any two-byte characters, such as Japanese, and the following signs as below: < > ( ) # ' " , and spaces (blank)
HTTP	Either [Block] , [Monitor] or [Disable]	Select an Antivirus behavior to HTTP.
FTP	Either [Block] , [Monitor] or [Disable]	Select an Antivirus behavior for FTP.
SMTP	Either [Block] , [Monitor] or [Disable]	Select an Antivirus behavior for SMTP.
POP3	Either [Block] , [Monitor] or [Disable]	Select an Antivirus behavior to POP3.
IMAP	Either [Block] , [Monitor] or [Disable]	Select an Antivirus behavior to IMAP.
MAPI	Either [Block] , [Monitor] or [Disable]	Select an Antivirus behavior for MAPI (MAPI / RPC).
NNTP	Either [Block] , [Monitor] or [Disable]	Select an Antivirus behavior to NNTP.
Comment	（Half-width alphabetic characters & half-width numbers)	Fill in your comment if you like. Fill in your comment by using less than 225 letters. You can NOT utilize any two-bytes characters, such as Japanese.

2.2.6.1.3. Adding Antivirus Profile

1. Click the Routing from the left-side Object screen.

   Security Profile ‣ Antivirus ‣ Antivirus

   Click [ Add ] at Antivirus of the right-side screen.

   

2. Click [ Save ] after you input the setting value.

   Input Antivirus Profile : Setting Items to the setting value.

   

3. Apply configuration to the device by clicking [Apply configuration].

   

Note

• Please be sure to execute [Apply configuration] in Profile before create Firewall policy.

2.2.6.1.4. How to Change Security Profile (Edit / Duplicate / Remove)

1. Click the Routing from the left-side Object screen.

   Security Profile ‣ Antivirus ‣ Antivirus

   Select the target changed line at Routing screen of the right-side. Click an operation button you need.

   

   
   

   Following describes respective buttons of Antivirus .

   Buttons	Descriptions
   Edit	Modify the value of Antivirus Profie that has already been set.
   Duplicate	After duplicating the existing Antivirus Profile , the object setting screen will open with the same value. Make sure to change Profile Name. This is useful for you to define another Profile with the same value.
   Remove	Delete the selected Profile .

   
   

   When you deleting one , the confirmation message will display. Please click [OK] to finally execute its deletion.

   

   NOTE: You can not remove any object which has been utilizing at a Firewall Policy.

2. Apply configuration to the device by clicking [Apply configuration].

   

Note

• Please be sure to execute [Apply configuration] in Profile before create Firewall policy.

---

2.2.6. How to Set up a Security Profile

2.2.6.2. Web Fileter [ Web Filter Function Profile ]