Gateway Action
Recommended Action
Revision
Parameters
Context Parameters
2.3.18. virus_url_detected (ID: 05800021)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
Revision
Parameters
Context Parameters
2.3.19. decompression_failed_encrypted_file (ID: 05800024)
Default Severity
Log Message
Explanation
Gateway Action
Recommended Action
protect the receiver.
block_data
None.
1
url
advisoryid
[layer7_srcinfo]
[layer7_dstinfo]
ALG Module Name
ALG Session ID
Connection
WARNING
Virus infected URL found in URL <url>. Advisory ID: <advisoryid>.
A virus infected URL request has been detected. Since anti-virus is
running in audit mode, the request will be allowed to continue.
allow_data
None.
1
url
advisoryid
[layer7_srcinfo]
[layer7_dstinfo]
ALG Module Name
ALG Session ID
Connection
WARNING
Decompression failed for file <filename>. The file is encrypted.
The file could not be scanned by the anti-virus module since the
compressed file is encrypted with password protection. Since
anti-virus is running in protect mode, the data transfer will be
aborted in order to protect the receiver.
block_data
Change Fail Mode parameter to allow if files that fail decompression
should be allowed without scanning.
178
Chapter 2: Log Message Reference