Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 425 / 1026

Configuring Internal AV Profiles
Internal AV profiles allow you to set AV settings for multiple devices via a policy. NSM
comes with a predefined AV profile, or you can create your own.
•
Viewing a Predefined Profile on page 375
• Creating Custom AV Profiles on page 375
• Configuring Extension Lists on page 376
Viewing a Predefined Profile
To view the predefined AV profile, select Object Manager > AV Objects > Internal >
Predefined Profiles . Select the predefined profile, then click the Edit button. You cannot
make changes to the profile.
Creating Custom AV Profiles
To create a custom AV profile, select Object Manager > UTM > ScreenOS > AV Objects
> Internal > Predefined Profiles/Custom Profiles . Click the Add button.
Populate the fields of the New Internal Antivirus Profile dialog:
•
General information—Assign a name and color to the profile, and enter a comment
describing the purpose of the profile.
• For each protocol type, check the Enable check box to enable scanning for that protocol,
then set the following settings for each enabled protocol:
•
Scan Mode: All, Intelligent, or by File Extension. If you select Scan by File Extension,
you must populate the Ext List Include field.
• Scanning Timeout: Scans that take longer than this time out and are not completed.
•
Decompress Layer: The number of levels of decompression to perform before
scanning. A decompression setting of 2 would all the scanning of a .zip file within a
.zip file.
• Skip Mime (HTTP only): If checked, causes the scanner to skip any mime types listed
in the Mime List field.
• Ext List Include: A list of file extensions to examine for viruses. Extension lists are
created under Object Manager > AV Objects > Extension Lists.
• Ext List Exclude: A list of file extensions to not examine for viruses. Extension lists
are created under Object Manager > AV Objects > Extension Lists.
• Mime List (HTTP only): The list of mime types to not scan. NSM ships with a default
mime type list, or you can create your own under Object Manager > AV Objects >
Custom Mime Lists.
• Email Notify Virus Sender (IMAP, POP3, SMTP only): Notifies an e-mail sender if a
virus was found in the e-mail.
375 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Objects