Security Services
Configuring Anti-Virus
Cisco ISA500 Series Integrated Security Appliances Administration Guide
255
7
Refer to the following topics:
•
General Anti-Virus Settings, page 255
•
Configuring Advanced Anti-Virus Settings
•
Configuring HTTP Notification, page 259
•
Configuring Email Notification, page 259
•
Updating Anti-Virus Signatures, page 260
General Anti-Virus Settings
Use the General Settings page to enable or disable Anti-Virus, specify the zones
to scan for viruses, and configure the preventive actions for different types of
traffic, and set the maximum file size to scan.
STEP 1
Click
Security Services > Anti-Virus > General Settings
.
STEP 2
Click
On
to enable Anti-Virus, or click
Off
to disable it.
STEP 3
In the
Zone to Scan
area, specify the zones to scan the viruses:
•
WAN Zone:
Choose this option to scan the viruses for all incoming and
outgoing traffic for the WAN zone.
•
WAN+VPN Zone:
Choose this option to scan the viruses for all incoming and
outgoing traffic for both WAN and VPN zones.
•
All Zone:
Choose this option to scan the viruses for all incoming and
outgoing traffic for all zones.
STEP 4
In the
Applications to Scan
area, perform the following tasks to scan for viruses on
your network:
•
Enable:
Check the box in this column to scan for viruses over a protocol.
•
Logging:
Check the box in this column to log the events when viruses are
detected.
To log Anti-Virus events, you must first check the
Logging
box for the
protocols, and then go to the Device Management > Logs
pages to configure
the log settings and log facilities. See
.
-
To save Anti-Virus logs to the local syslog daemon, you must enable the
Log feature, set the log buffer size and the severity level for local logs, and
then enable the Local Log settings for the Anti-Virus facility.
