Nokia IP60 - Security Appliance, User Manual

Page: 313 / 494

Configuring VStream Antivirus
Chapter 14: Using VStream Antivirus 313
For example, if you want to scan all outgoing SMTP traffic, except traffic from a specific IP address, you
can create a rule scanning all outgoing SMTP traffic and move the rule down in the
Antivirus Policy
table.
Then create a rule passing SMTP traffic from the desired IP address and move this rule to a higher location
in the
Antivirus Policy
table than the first rule. In the figure below, the general rule is rule number 2, and the
exception is rule number 1.
The IP60 appliance will process rule 1 first, passing outgoing SMTP traffic from the specified IP address,
and only then it will process rule 2, scanning all outgoing SMTP traffic.
The following rule types exist:
Table 86: VStream Antivirus Rule Types
Rule Description
Pass This rule type enables you to specify that VStream Antivirus should not scan
traffic matching the rule.
Scan This rule type enables you to specify that VStream Antivirus should scan traffic
matching the rule.
If a virus is found, it is blocked and logged.
Adding and Editing VStream Antivirus Rules
To add or edit a VStream Antivirus rule
1. Click
Antivirus
in the main menu, and click the
Policy
tab.