If you have purchased the Gateway AntiVirus feature, you can specify the actions the Firebox takes if a virus is found in a website or when the device cannot scan a website.
- To use the proxy action settings to activate Gateway AntiVirus, go to Enable Gateway AntiVirus in a Proxy Policy.
- To use the Subscription Services menu to activate Gateway AntiVirus, go to Enable Gateway AntiVirus with a Wizard.
In the Gateway AV settings in the proxy action, you can select the Enable Gateway AntiVirus check box to automatically change the action for all rules in the proxy action from Allow to AV Scan.
In the Gateway AV settings in the HTTP-proxy action, you can set these actions to take if a virus is detected or if a file cannot be scanned.
Allow
Allows the packet to go to the recipient, even if the content contains a virus.
Drop
Drops the packet and drops the connection. No information is sent to the source of the message.
Block
Blocks the packet, and adds the IP address of the sender to the Blocked Sites list.
You can also configure the Scan size limit. Gateway AntiVirus does not scan files that are larger than the configured scan size limit. For more information, go to About Gateway AntiVirus Scan Limits.
For more information about how to configure the Gateway AntiVirus actions and scan size limit go to Configure Gateway AntiVirus Actions.