McAfee MAP-3300-SWG - Web Security Appliance 3300, Product Manual

Page: 185 / 336

Table 174 Option definitions
Option Definition
Enable anti-virus scanning
When selected, scans for viruses and other threats such as worms and
spyware. The option is normally set to
Yes
. Select
No
only if you have
anti-virus protection elsewhere in your network.
Specify which files to scan
•
Scan all files
— offers the highest security. However, scanning takes longer
and might affect performance.
•
Default file types
— scans only the most susceptible types of files.
•
Defined file types
— scans only the types in the list.
Scan archive files (ZIP, ARJ,
RAR ...)
When selected, scans this type of file. However, scanning takes longer and
might affect performance. The contents of these files are harmful only
when files inside are extracted, and can then by scanned by on-access
scanners in individual computers in your network.
Find unknown file viruses When selected, does extra analysis to find any virus-like behavior.
Find unknown macro viruses
to
Remove all macros from
document files
When selected, take actions against macros in documents. Macros inside
documents are a popular target for virus writers.
Enable McAfee Global Threat
Intelligence file reputation
with
Sensitivity level
Enables McAfee Global Threat Intelligence file reputation on your appliance.
McAfee Global Threat Intelligence file reputation complements the
DAT-based signatures by providing the appliances access to millions of
cloud-based signatures. This reduces the delay between McAfee detecting a
new malware threat and its inclusion in DAT files, providing broader coverage.
The sensitivity levels enable you to balance the risk of missing potentially
harmful content (low settings) with the risk of false positive detections
(high settings).
For gateway appliances, the recommended sensitivity level is Medium.
Attempt to clean When selected, the infection inside the item is removed, if possible. When
deselected, the entire item is removed.
If cleaning succeeds
Provides several actions after cleaning succeeds.
If cleaning fails Provides several actions if the cleaning failed.
Use the default alert When selected, issues the default alert upon detection. When deselected,
allows you to click the link, then change the text of the alert.
And also
Provides several further actions.
If a file is zero bytes after
cleaning
Provides an action against a file that is now empty. Zero-byte files cannot
carry threats but you might prefer to remove the files if they confuse users.
Make deobfuscated content
available to other scanners
When selected, provides extra protection against unwanted content. The
techniques that detect hidden viruses and malware are made available to
content scanning.
Anti-Virus Settings — McAfee Anti-Spyware
Use this page to specify the McAfee Anti-Spyware settings for anti-virus scanning.
Email
|
Email Policies
|
Scanning Policies
|
Viruses:
|
Anti-Virus Settings
|
McAfee Anti-Spyware
Overview of Web features
Web Policies
McAfee Email and Web Security Appliances 5.6.0 Product Guide 185