Stormshield SN series Configuration Manual page 137

Depending on the
direction of the traffic,
IPS_ 00 to 09
Application inspection
Antivirus
Sandboxing
Antispam
HTTP Cache
URL filtering
Page 137/448
You can customize the configuration of your security inspection by assigning a
predefined policy to it, which will appear in the filter table.
Numbered configurations can be renamed in the menu Application protection >
Inspection profiles.
NOTE
The value suggested by default (Depending on the direction of the traffic) uses
the IPS_00 profile for incoming traffic and the profile IPS_01 for outgoing traffic.
The On / Off buttons allow you to enable or disable the antivirus in your filter
rule.
NOTE
This analysis is only run on HTTP, FTP, SMTP, POP3 protocols and on their
variants in SSL. It can be configured for each of these protocols in the menu
Application protection > Protocols.
The On / Off buttons allow you to enable or disable sandboxing (malicious files) in
your filter rule.
NOTE
Enabling this option requires the use of the Kaspersky antivirus.
NOTE
This analysis is only run on HTTP, FTP, SMTP, POP3 protocols and on their
variants in SSL. It can be configured for each of these protocols in the menu
Application protection > Protocols.
The On / Off buttons allow you to enable or disable the antispam in your filter rule.
NOTE
This analysis is only run on SMTP, POP3 protocols and on their variants in SSL. It
can be configured for each of these protocols in the menu Application
protection > Protocols.
On/ Off buttons allow you to enable or disable the HTTP cache in your filter rule.
This feature makes it possible to memorize all types of resources when visiting
websites, so that they do not need to be downloaded again from the internet during
new visits, even for different clients. However, this mode is recommended only for
internet links with low bandwidth or for which access is restricted to a limited number
of websites. This feature is available only for models equipped with a hard disk.
NOTE
This option only applies to HTTP and HTTPS traffic if SSL inspection has been
enabled.
The total amount of data that can be memorized is 100 MB on the disk and 1MB in
RAM. The maximum size of a resource that can be memorized is 32 KB. The tracking of
memorized resources and cache management can be viewed in Realtime Monitor
(Dashboard).
To enable this filtering method, select a URL filter profile from the suggested profiles.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
FILTERING AND NAT