NEC ZA-SA3500G, Function Manual

Page: 48 / 359

48 Function Specification |
3.3.7. Antivirus (AV ）
A function that rewrites the program and render it harmless when a virus or dangerous code is detected .
7
It monitors web browsing, received emails and communication of other applications and checks whether a virus exists
in the downloaded or uploaded file. When virus exists in the file, the content of the file is rewritten.

Corresponds to the file across a compressed file and multiple packets (packet fragments).

Does not correspond if it is encrypted (SSL communication and password-protected compressed file).
[Detection targets]
Virus, spyware, Trojan horse, and worm
[Protocols to be detected]
Protocol Description
HTTP Port number to be detected: 1~65535
HTTP detection method: GET (upstream, downstream), POST (upstream)
FTP Port number to be detected: 20, 21
SMTP Port number to be detected: 25, 587
Encoding to be detected: base64, quoted-printable, Uuencode
File format to be detected : eml
POP3 Port number to be detected: 110
Encode to be detected: base64, quoted-printable, Uuencode
File format to be detected: eml
IMAP4 Port number to be detected: 143
Encode to be detected: base64, quoted-printable, Uuencode
7
After rewriting, the concerned packet is sent. (Because the file is rewritten, an EXE file, for example, cannot be executed.)
SA3500G
User Network
Cleans the virus