Antivirus; Antivirus Engine; Parameters; Analysis Of Clamav Files - Stormshield SN series Configuration Manual

ANTIVIRUS

The configuration screen for the Antivirus service consists of 3 zones:
Selection of the antivirus engine
l

Parameters

l
An area relating to sandboxing, available only for the Kaspersky analysis engine.
l

Antivirus engine

The drop-down list allows migrating between antivirus solutions (ClamAV or Kaspersky). When the
choice of an antivirus is made, the following message will appear:
"The antivirus database has to be fully downloaded before the antivirus can be changed.
During this interval, the antivirus scan will fail." Click on Switch engines to confirm your
selection.
Once the database has been downloaded, the antivirus will be enabled.
Parameters

Analysis of ClamAV files

In this menu, the types of files that need to be scanned by the Stormshield Network firewall
antivirus service are configured.
Analyze compressed
executable files
Analyze archives
Block encrypted or
password-protected
files
Block unsupported file
formats

Analysis of Kaspersky files

Inspect archives
Block password-
protected files
Page 40/448
This option enables the decompression engine (Diet,Pkite, Lzexe, Exepack...).
This option enables the extraction engine and allows scanning archives (zip, arj, lha,
rar, cab...)
This option allows blocking files that are encrypted or protected by a password.
This option allows blocking file formats that the antivirus is unable to scan.
This option enables the extraction engine and allows scanning archives (zip, arj, lha,
rar, cab...)
This option allows blocking files that are protected by passwords.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
ANTIVIRUS