General Anti-Virus Settings - Cisco ISA550 Administration Manual

Security Services
Configuring Anti-Virus
STEP 1
STEP 2
STEP 3
STEP 4
Cisco ISA500 Series Integrated Security Appliances Administration Guide
Refer to the following topics:
• General Anti-Virus Settings, page 255
• Configuring Advanced Anti-Virus Settings
• Configuring HTTP Notification, page 259
• Configuring Email Notification, page 259
• Updating Anti-Virus Signatures, page 260

General Anti-Virus Settings

Use the General Settings page to enable or disable Anti-Virus, specify the zones
to scan for viruses, and configure the preventive actions for different types of
traffic, and set the maximum file size to scan.
Click Security Services > Anti-Virus > General Settings.
Click On to enable Anti-Virus, or click Off to disable it.
In the Zone to Scan area, specify the zones to scan the viruses:
• WAN Zone: Choose this option to scan the viruses for all incoming and
outgoing traffic for the WAN zone.
• WAN+VPN Zone: Choose this option to scan the viruses for all incoming and
outgoing traffic for both WAN and VPN zones.
• All Zone: Choose this option to scan the viruses for all incoming and
outgoing traffic for all zones.
In the Applications to Scan area, perform the following tasks to scan for viruses on
your network:
• Enable: Check the box in this column to scan for viruses over a protocol.
• Logging: Check the box in this column to log the events when viruses are
detected.
To log Anti-Virus events, you must first check the Logging box for the
protocols, and then go to the Device Management > Logs pages to configure
the log settings and log facilities. See
- To save Anti-Virus logs to the local syslog daemon, you must enable the
Log feature, set the log buffer size and the severity level for local logs, and
then enable the Local Log settings for the Anti-Virus facility.
Log Management, page
7
392.
255