F-SECURE INTERNET GATEKEEPER WINDOWS 2000-2003 SERVER 6.61..., Administrator'S Manual

Page: 277 / 414

CHAPTER 11 277
Security and Performance
11.2.2 Access Control
F-Secure Anti-Virus for Internet Gateways should allow outbound
connections only from the intranet hosts. To specify which hosts are
allowed to connect to F-Secure Anti-Virus for Internet Gateways, see
“
Connections to F-Secure Anti-Virus for Internet Gateways ” , 123 . To
configure F-Secure Anti-Virus for Internet Mail to send e-mails only to
verified e-mail addresses, see “
Receiving ” , 166 .
11.2.3 Data Trickling
As there is a chance that a part of the malicious code passes through
F-Secure Internet Gatekeeper before the virus scanner can detect it, it is
not recommended to use large values in the
Trickle Packet Size setting.
Use small values for optimized security. For more information, see “ Data
Trickling ” , 101 .
11.3 Optimizing Performance
For the best performance, you should keep all working directories on a
local hard disk and make sure that there is enough free disk space for
temporary files in all situations.
11.3.1 Virus Scanning
For optimized performance, configure F-Secure Internet Gatekeeper to
disinfect or block only those files and e-mails that may carry viruses and
not to scan all files. The disinfection can take some time, so you may want
to block all infected files and e-mails straight away.
If you enable Scan inside archive files , F-Secure Internet Gatekeeper
scans files inside archived files which takes time. You can improve the
performance by disabling archive scanning, but then all users in the
corporate network need up-to-date virus protection on their workstations.
For more information, see “
Advanced ” , 224 .