Updating Antivirus Patterns

The express antivirus pattern database is updated over HTTP or HTTPS and can occur automatically or manually. This is similar functionality to that found in full antivirus with some minor differences.

The following list explains the differences found in express antivirus for database pattern updating functionality:

• With express antivirus, the signature database auto-update interval, is once a day.
• With express antivirus, there is no support for the downloading of multiple database types.
• With express antivirus, during database loading, all scan operations are interrupted. Scan operations for existing traffic flows are stopped and no new scan operations are initiated for newly established traffic flows. You can specify the desired action for this interruption period using the fall-back parameter for engine-busy-loading-database. The available actions are block or log-and-permit.
• By default, the URL for express antivirus is http://update.juniper-updates.net/EAV/SRX210. “SRX210” in the URL is the platform name. This part of the URL is different and platform specific for each platform. (Other than the platform name, you should not change this URL unless you are experiencing problems with it and have called for support.)

Note: Once your subscription expires, you have a 30 day grace period during which you can continue to update the antivirus pattern file. Once that grace period expires, the update server no longer permits antivirus pattern file updates.

Example: Automatic Update

In this example, you configure the security device to update the pattern file automatically every 120 minutes. (The default antivirus pattern-update interval is once a day.)

• J-Web
  1. Select Configure>Security>UTM>Anti-Virus.
  2. Next to Interval, in the Juniper Express Engine section, enter 120 in the box.
  3. Click OK.
• CLI

  user@host# set security utm feature-profile anti-virus juniper-express-engine pattern-update interval 120

Example: Manual Update

In this example, you use the request command to update the pattern file manually.

• J-Web

  At this time, you cannot perform manual database updates using J-Web.

• CLI

  user@host> request security utm anti-virus juniper-express-engine pattern-update

  You can also manually delete the pattern database (pattern-delete) and reload the pattern database (pattern-reload) using the request command.