Express Antivirus Protection

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Express antivirus scanning is offered as a less CPU intensive alternative to the full file-based antivirus feature.

The express Antivirus scanning feature is a separately licensed subscription service. When your antivirus license key expires, you can continue to use locally stored antivirus signatures. But in that case, if the local database is deleted, antivirus scanning is disabled.

Note: For information on the full antivirus feature, refer to that section in the manual. Note that if you switch from express antivirus protection to full file-based antivirus protection, you must reboot the device in order for full file-based antivirus to begin working.

Express antivirus supports the same protocols as full antivirus and functions in much the same manner. The main differences between express antivirus and full antivirus are as follows:

Express antivirus uses a different antivirus scan engine and a different back-end hardware engine to accelerate pattern matching for higher data throughput.
Express antivirus uses a different signature database, called Juniper Express antivirus database, compatible with the hardware engine, to target to only critical viruses and malware, including worms, Trojans, and spyware. This is a smaller sized database, providing less coverage than the full antivirus signature database.
Express antivirus has a smaller memory footprint, compatible with the smaller system memory present on lower end devices.
Express antivirus supports packet-based antivirus scanning. See Packet-Based Scanning Versus File-Based Scanning
Express antivirus is not supported for J Series devices.

For information about which devices support the features documented in this chapter, see the JUNOS Software Feature Support Reference for SRX Series and J Series Devices.

This chapter includes the following topics:

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]