Internal Antivirus Scan Manager Settings Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide
Table 40: External AV Scanner Settings (continued)
External AV Scanner Options
HTTP Settings
Trickling
Related
Documentation

Internal Antivirus Scan Manager Settings Overview

Table 41: Internal AV Scan Manager Settings
Internal AV Scan
Manager Options Your Action
Pattern Server URL You specify the URL address of the
server from which the device
retrieves pattern file updates.
178
Description
HTTP keep-alive—This option directs the device to use the HTTP keep-alive
connection option. Using this option prevents the device from sending a TCP FIN
message to indicate termination of data transmission.
Skip scanning HTTP content with predefined content type—By default this option
is enabled. This means HTTP scanning does not scan HTTP entities composed
of any of the following Multipurpose Internet Mail Extensions (MIME) content
types (and when followed by a slash, subtypes):
application/x-director
application/pdf; image
video
audio
text/css
text/html
Because most HTTP entities are composed of these content types, HTTP scanning
only applies to a small subset of HTTP entities such as /zip and application /exe
content types, where viruses are most likely to be hiding.
You can direct the device to forward specific amounts of unscanned traffic to the
HTTP client to prevent the client from timing out while the scanner is busy examining
downloaded HTTP files. If you select Custom, you can specify the amounts that are
forwarded. Selecting Default resets the amounts to their default values.
Internal Antivirus Scan Manager Settings Overview on page 178
Internal Antivirus HTTP Webmail Settings Overview on page 181
Classification of Antivirus Scanning Overview on page 176
Yo can use the AV Scan Manager Settings tab to configure the AV scanner options
available in the UI. Table 41 on page 178 describes the internal AV Scan Manager setting
options.
Comments
You can use one of the following two default pattern-update
URLs:
To use the Kaspersky internal antivirus scanner,
http://update.juniper-updates.net/av/5gt
To use the Trend Micro internal antivirus scanner,
http:/ /5gt-p.activeupdate.trendmicro.com/activeupdate/server.ini
Copyright © 2010, Juniper Networks, Inc.
.
.