Classification Of Security Options Overview; Classification Of Antivirus Scanning Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide

Classification of Security Options Overview

Related
Documentation

Classification of Antivirus Scanning Overview

176
Example: Configuring Redirect Web Filtering in ScreenOS (NSM Procedure) on page 193
Adding Proxy Addresses Overview on page 194
The security screen contains security options that you can set for the device. In the Device
dialog box, open the Security heading to see configuration options. For instructions for
configuring specific device settings, see the Network and Security Manager Online Help.
This topic describes the following security options:
Antivirus settings
Deep inspection
Attack database
Attack objects
Antispam
IDP SM settings
Web filtering
Classification of Antivirus Scanning Overview on page 176
External Antivirus Scanner Settings Overview on page 177
Internal Antivirus Scan Manager Settings Overview on page 178
A virus is executable code that infects or attaches itself to other executable code to
reproduce itself. Some malicious viruses erase files or lock up systems, while other viruses
merely infect files and can overwhelm the target host or network with bogus data.
Juniper Networks supports internal and external antivirus (AV) scanning on select security
devices. Use the antivirus (AV) option to configure AV scanning. Security devices may
provide one or more of the following antivirus scanning methods:
External AV scanning—Uses an external Trend Micro device for scanning. (Supported
in ScreenOS 5.2. Not supported in ScreenOS 5.3 or later.) The security device forwards
all traffic to be scanned to the Trend Micro device. To configure external AV scanning,
use the AV Scanner settings.
Internal AV scanning—Uses the AV scanner on the security device and is not supported
by all security devices. To configure internal AV scanning, use the AV Scan Manager
settings (see "Internal Antivirus Scan Manager Settings Overview" on page 178).
Internet Content Adaptation Protocol (ICAP) scanning—Uses an external ICAP server
or server group for scanning. Supported in ScreenOS 5.4 and later. Use the ICAP object
and ICAP AV object in Object Manager to create ICAP AV objects. These objects are
Copyright © 2010, Juniper Networks, Inc.