Antivirus Configuration Page Options

Profile Name

Displays the unique name of the antispam profile.

Intelligent Prescreening

Displays the intelligent prescreening status.

Trickling Timeout

Displays the trickling timeout interval.

Exception MIME Whitelist

Specifies a list of MIME types to be excluded from the whitelist. The exception MIME whitelist is a subset of MIME types found in the MIME whitelist.

Select the customized object from the list.

Juniper Express

Specifies the internal scan engine for full antivirus protection provided by Juniper Networks.

Note: This option is not supported on SRX1500 devices.

Select this option to choose the Juniper Express engine type.

Custom Message

Specifies the text of the pattern-update e-mail notification that is sent when the pattern update is complete.

Enter the customized message.

Pattern Update Interval (sec)

Specifies the interval at which the database server is queried for a new version of the database.

Enter the time interval for automatically updating the pattern database. The range is from 10 through 10080 seconds. The default interval is 60 seconds.

No Auto Update

Specifies that the automatic download and update of the antivirus engine and signature database are disabled.

Select the no auto update option.

Pattern Update URL

Specifies the URL of the database server.

Enter the URL for the pattern database.

Auto Update

Specifies that the antivirus pattern database is configured to be automatically updated.

Select the auto update option.

Proxy Server Port

Specifies the port with which the proxy server is associated.

Enter the port number.

Proxy Server Password

Specifies the password to use on the proxy server.

Enter the password.

Profile Type

Displays the internal scan engine for full antivirus option selected in the global options. Intelligent prescreening is only intended for use with non-encoded traffic.

-

Content Size Limit

Specifies the accumulated TCP payload size.

Enter the content size limit, a value from 20 through 20000 KB.

Decompress Layer Limit

Specifies the number of layers of nested compressed files the internal antivirus scanner can decompress before the execution of the virus scan.

Enter the decompress layer limit, a value from 1 through 4 layers.

Scan All Files

Specifies all files to be scanned.

Select this option to scan all files.

Scan Engine Filename Extension

Specifies the file extensions found in the traffic being scanned.

Select this option to scan the engine filename extension.

Intelligent Prescreening

Specifies the antivirus module used to begin scanning a file and improves antivirus scanning performance. The antivirus module generally begins to scan data after the gateway device has received all the packets of a file.

Select yes to enable intelligent prescreening.

Scan Engine Timeout

Specifies the timeframe between the scan request generated to the scan result returned by the scan engine. Trickling timeout value is used by all supported protocols. Each protocol can have a different timeout value.

Enter the time interval from 1 through 1800 seconds. The default value is 180 seconds.

URI Check

Specifies Uniform Resource Identifier blocking: an effective measure for preventing malware from reaching the endpoint. URI lookup is performed against an in-the-cloud malicious/infected URI database on each URI requested via HTTP.

Select the URI check check box to enable URI check.

Scan Engine Timeout

Specifies the timeframe between the scan request generated to the scan result returned by the scan engine. Trickling timeout value is used by all supported protocols. Each protocol can have a different timeout value.

Enter the time interval from 1 through 1800 seconds. The default value is 180 seconds.

Query Retries

Specifies the antivirus engine query retry (number of times) value.

Enter the query retry value from 0 through 5.

Default Action

Specifies all errors other than the categorized settings. This could include either unhandled system exceptions (internal errors) or other unknown errors. The available actions are block or log-and-permit.

Select Log and Permit. The default action is Block.

Password File

Specifies the error returned by the scan engine when the scanned file is protected by a password. The available actions are block or log-and-permit.

Select Log and Permit. The default action is Block.

Content Size

Specifies that if the content size exceeds a set limit, the content is passed or blocked depending on the max-content-size fallback option. The available actions are block or log-and-permit.

Select Log and Permit. The default action is Block.

Timeout

Specifies that if the time taken to scan exceeds the timeout setting in the antivirus profile, the processing is aborted and the content is passed or blocked without completing the virus checking. The decision is made based on the timeout fallback option. The available actions are block or log-and-permit.

Select Log and Permit. The default action is Block.

Too Many Requests

Specifies that if the total number of messages received concurrently exceeds the device limits, the content is passed or blocked depending on the too-many-request fallback option. The available actions are block or log-and-permit.

Select Log and Permit. The default action is Block. The allowed request limit is not configurable.

Notify Mail Sender

Specifies that when a virus is detected and a fallback option of block is triggered, an e-mail is sent to the administrator.

Select the Notify Mail Sender check box to enable this notification.

Custom Message Subject

Specifies the subject line text for your custom message for the fallback block notification.

Enter the subject line text for your custom message.

Allow Email

Specifies that a notification e-mail address must be allowed.

Select the check box to allow e-mail.

Custom Message

Specifies the customized message text for the fallback nonblock notification.

Enter the text for this custom notification message (if you are using one).

Notify Mail Sender

Specifies whether or not a notification is sent to the virus-detection notification e-mail address when a virus is detected.

Select yes to send a notification and no to not send a notification.

Custom Message Subject

Specifies the subject line text for your custom message for the virus detection notification.

Enter the subject line text for your custom message.