Virus-Detected Notifications
Virus-Detected notification is used to notify the sender or the recipient about the detected viruses or the scanning errors. For more information, see the following topics:
Understanding Protocol-Only Virus-Detected Notifications
The Protocol-Only Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, when content is blocked because a virus is found or a scan error occurs, the client generally still receives a successful response code but with modified content (file replacement) containing a warning message. But with protocol-only notifications, a protocol-specific error code may be returned to the client. This way, the client determines that a virus was detected rather than interpreting that a file transfer succeeded.
Configuring Protocol-Only Virus-Detected Notifications (CLI Procedure)
The Protocol-Only Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, to configure protocol-only virus-detected notifications, use the following CLI configuration statements:
security utm feature-profile anti-virus kaspersky-lab-engine profile name {
notification-options {
virus-detection {
type { protocol-only | message }
}
fallback-block {
type { protocol-only | message }
}
}
}
}
The [edit security utm feature-profile] hierarchy
level is deprecated in Junos OS Release 18.2R1. For more information,
see Content Security Overview.
Understanding E-Mail Virus-Detected Notifications
The E-Mail Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, for mail protocols (SMTP, POP3, IMAP), e-mail notification is used to notify the sender or the recipient about the detected viruses or the scanning errors. There are three settings for e-mail notifications:
virus-detection/notify-mail-sender — This setting is used when a virus is detected. If it is enabled, an e-mail is sent to the sender upon virus detection.
fallback-block/notify-mail-sender — This setting is used when other scan codes or scanning errors are returned and the message is dropped. If it is enabled, an e-mail is sent to the sender when an error code is returned.
fallback-non-block/notify-mail-recipient — This setting is used when other scan codes or scanning errors are returned and the message is passed. If it is enabled, the e-mail sent to the recipient is tagged when an error code is returned.
Configuring E-Mail Virus-Detected Notifications (CLI Procedure)
The E-Mail Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, to configure the system to send e-mail notifications when viruses are detected, use the following CLI configuration statements:
security utm feature-profile anti-virus kaspersky-lab-engine profile name {
notification-options {
virus-detection {
notify-mail-sender
}
fallback-block {
notify-mail-sender
}
fallback-non-block {
notify-mail-recipient
}
}
}
}
The [edit security utm feature-profile] hierarchy
level is deprecated in Junos OS Release 18.2R1. For more information,
see Content Security Overview.
Understanding Custom Message Virus-Detected Notifications
The Custom Message Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, custom message notifications are mainly used in file replacement or in a response message when the antivirus scan result is to drop the file. When using custom messages, you can provide a customized message in the message content you can define customized subject tags.
Custom-message in fallback-nonblock is used only by mail protocols.
Configuring Custom Message Virus-Detected Notifications (CLI Procedure)
The Custom Message Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, to configure the system to send custom messages when viruses are detected, use the following CLI configuration statements:
security utm feature-profile anti-virus kaspersky-lab-engine profile name {
notification-options {
virus-detection {
custom-message msg
custom-message-subject subject-msg
}
fallback-block {
custom-message msg
custom-message-subject subject-msg
}
fallback-non-block {
custom-message msg
custom-message-subject subject-msg
}
}
}
}
The [edit security utm feature-profile] hierarchy
level is deprecated in Junos OS Release 18.2R1. For more information,
see Content Security Overview.