Configuring Anti-Virus

This section describes how to configure Anti-Virus.

Preparing

Before enabling Anti-Virus, make the following preparations:

1. Make sure your system version supports Anti-Virus.
2. Import an Anti-Virus license and reboot. The Anti-Virus will be enabled after the rebooting.

Creating an Anti-Virus Rule

To create an Anti-Virus rule, take the following steps:

1. On the Navigation pane, click Configure > Security > Anti-Virus to visit the Anti-Virus page.
2. Click New.
3. In the Anti-Virus Rule Configuration dialog, type the name into the Rule name box.
4. After the Binding zone option, select a security zone for the Anti-Virus rule from the Available list, and click to add to the Selected list.
5. Specify a protection type. If Predefined is selected, you need to specify a security level for the protection in the Security level section. The default level is Medium. If User-defined is selected, you need to specify the file types and protocol types, as well as the actions that will be taken if any virus has been detected. If needed, configure other related options as below.
   • Enable malicious website detection: With this function enabled, system will detect Trojans, phishings and other malicious behaviors when you are trying to visit URLs, and process malicious URLs according to the actions specified by system.
   • Enable label email: If an email transferred over SMTP is scanned, you can enable label email to scan the email and its attachment(s). The scanning results will be included in the mail body, and sent with the email. If no virus has been detected, the message of "No virus found" will be labeled; otherwise information related to the virus will be displayed in the email, including the filename, path, result and action.
6. Click OK to save your settings and return to the Anti-Virus page.

Editing an Anti-Virus Rule

To edit an Anti-Virus rule, take the following steps:

1. On the Navigation pane, click Configure > Security > Anti-Virus to visit the Anti-Virus page.
2. Select the Anti-Virus rule you want to edit, and click Edit. In the Anti-Virus Rule Configuration dialog, modify according to your need.
3. Click OK to save your changes.

Deleting an Anti-Virus Rule

To delete an Anti-Virus rule, take the following steps:

1. On the Navigation pane, click Configure > Security > Anti-Virus to visit the Anti-Virus page.
2. Select the Anti-Virus rule you want to delete, and click Delete.

Updating Signature Database

By default system updates the signature database everyday automatically. You can change the update configuration if needed. System supports auto update and local update.

To configure options for auto update, take the following steps:

1. On the Navigation pane, click Configure > Security > Anti-Virus to visit the Anti-Virus page.
2. On the Task tab in the right pane, click Configure behind Auto update.
3. In the Auto Update Configuration - Virus Signature DB dialog, configure options.
   • Last update result: Displays the status of the last update.
   • Last update time: Displays the last update time of the virus database.
   • Auto update: Enables or disables auto update.
   • Schedule: Specifies an update schedule which can be an arbitrary time of a day or a week. You can specify a time at your own choice.
   • Server 1: Specifies an IP address for the update server.
   • Server 2: Specifies an IP address for the update server.
   • Server 3: Specifies an IP address for the update server.
   • Restore Default Server: Click the button to restore to the default.
   • OK: Saves the changes and returns to the previous dialog/page.
   • Cancel: Cancels the changes and returns to the previous dialog/page.
4. Click OK to save your changes and close the dialog.

After completion, the system will update the virus signature database automatically according to the configured schedule.

To update the virus signature database locally, take the following steps:

1. On the Navigation pane, click Configure > Security > Anti-Virus to visit the Anti-Virus page.
2. On the Task tab in the right pane, click Upload after Local update.
3. In the Local Update Configuration dialog, click Browse, select a virus signature database file on the local disk, and click Upload.

To update the virus signature database immediately, take the following steps:

1. On the Navigation pane, click Configure > Security > Anti-Virus to visit the Anti-Virus page.
2. On the Task tab in the right pane, click Update Now. The system will update the virus signature database immediately.

Configuring AV Global options

To configure AV global options, take the following steps:

1. On the Navigation pane, click Configure > Security > Anti-Virus to visit the Anti-Virus page.
2. On the Task tab in the right pane, configure options in the AV Global Configuration section.
   • Anti-Virus: Select/clear the Enable check box to enable/disable Anti-Virus.
   • Max decompression layer: By default system can scan the files of up to 5 decompression layers. To specify a decompression layer, select a value from the drop-down list. The value range is 1 to 5.
   • Exceed action: Specifies an action for the compressed files that exceed the max decompression layer. Select an action from the drop-down list:
     Log only - Only generates logs but will not scan the files. This action is enabled by default.
     Reset connection - If virus has been detected, system will reset connections to the files.
     
   • Encrypted compressed file: Specifies an action for encrypted compressed files:
     ------ - Will not take any special anti-virus actions against the files, but might further scan the files according to the configuration.
     Log only - Only generates logs but will not scan the files.
     Reset connection - Resets connections to the files.
3. Click OK to save your settings.