2.2.6.1. Antivirus : [ Antivirus Function Profile ]

Here we create a profile of the UTM Antivirus Function being utilized at a Firewall Policy.
At the Antivirus Profile, you can inactivate the antivirus function including a protocol for each protocol, activate one to block any viruses, or activate one only to detect viruses without any block.
The maximum file size being detected by the Antivirus Function should be specified at the Scan Ports Profile.

2.2.6.1.1. Default Value

When your clicking [ Antivirus ] by default, the default Antivirus Profile will display.
既定のAntivirusプロファイル

AntiVirus_Monitor, __upg_AntiVirus_Monitor only detect on all protocols, AntiVirus_Block, __upg_AntiVirus_Block detect and block on all protocols.
In addition, the profile with __upg notation at the beginning outputs the HTTP header as a log when HTTP communication is detected. See here for more information.
Besides, you can utilize the default Antivirus Profile itself as well as you can modify it to your unique definition.

2.2.6.1.2. Antivirus Profile : Setting Items

Following explain the setting items of Antivirus Profile.

Items

Values

Descriptions

Profile Name

(Half-width alphabetic characters & half-width numbers)

Enter the name of profile.
You can NOT utilize any two-byte characters, such as Japanese, and the following signs as below:
< > ( ) # ' " , and spaces (blank)
HTTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to HTTP.

FTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior for FTP.

SMTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior for SMTP.

POP3

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to POP3.

IMAP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to IMAP.

MAPI

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior for MAPI (MAPI / RPC).

NNTP

Either [Block] , [Monitor] or [Disable]

Select an Antivirus behavior to NNTP.

Comment

(Half-width alphabetic characters & half-width numbers)

Fill in your comment if you like.
Fill in your comment by using less than 225 letters. You can NOT utilize any two-bytes characters, such as Japanese.


2.2.6.1.3. Adding Antivirus Profile

  1. Click the Routing from the left-side Object screen.
    Security Profile ‣ Antivirus ‣ Antivirus

    Click [ Add ] at Antivirus of the right-side screen.

    Click Add


  1. Click [ Save ] after you input the setting value.
    Input Antivirus Profile : Setting Items to the setting value.

    Save Object


  1. Apply configuration to the device by clicking [Apply configuration].

    Save Config


Note

  • Please be sure to execute [Apply configuration] in Profile before create Firewall policy.



2.2.6.1.4. How to Change Security Profile (Edit / Duplicate / Remove)

  1. Click the Routing from the left-side Object screen.
    Security Profile ‣ Antivirus ‣ Antivirus

    Select the target changed line at Routing screen of the right-side. Click an operation button you need.

    Click Change


    Following describes respective buttons of Antivirus .

    Buttons

    Descriptions

    Edit

    Modify the value of Antivirus Profie that has already been set.

    Duplicate

    After duplicating the existing Antivirus Profile , the object setting screen will open with the same value.
    Make sure to change Profile Name.
    This is useful for you to define another Profile with the same value.

    Remove

    Delete the selected Profile .


    When you deleting one , the confirmation message will display. Please click [OK] to finally execute its deletion.

    Confirm Delete Object

    NOTE: You can not remove any object which has been utilizing at a Firewall Policy.


  1. Apply configuration to the device by clicking [Apply configuration].

    Save Config


Note

  • Please be sure to execute [Apply configuration] in Profile before create Firewall policy.