Check Point UTM-1 Edge User Manual page 440

Overview
Table 96: VStream Antivirus Actions
If a virus if found in
this protocol...
HTTP
POP3
IMAP
SMTP
FTP
TCP and UDP
Note: In protocols that are not listed in this table, VStream Antivirus uses a "best
effort" approach to detect viruses. In such cases, detection of viruses is not
guaranteed and depends on the specific encoding used by the protocol.
426
VStream Antivirus does this...
•
Terminates the
connection
•
Terminates the
connection
•
Deletes the virus-
infected email from the
server
•
Terminates the
connection
•
Replaces the virus-
infected email with a
message notifying the
user that a virus was
found
•
Rejects the virus-
infected email with error
code 554
•
Sends a "Virus
detected" message to
the sender
•
Terminates the data
connection
•
Sends a "Virus detected"
message to the FTP
client
•
Terminates the
connection
The protocol is detected
on this port...
All ports on which VStream
Antivirus is enabled by the
policy, not only port 80
The standard TCP port 110.
The standard TCP port 143
The standard TCP port 25
The standard TCP port 21
Generic TCP and UDP ports,
other than those listed above
Check Point UTM-1 Edge User Guide