CHAPTER 2.
OPERATION OF
KASPERSKY ANTI-VIRUS
Kaspersky Anti-Virus 5.5 for Check Point
TM
Firewall-1
®
acts as a filter: processes
data, transferred over HTTP, FTP and SMTP protocols, identifies monitored
objects, analyzes them for the presence of malicious code and blocks attempts
of infected files and web documents to penetrate the local network.
2.1.
Deploying the application
The structure of Kaspersky Anti-Virus 5.5 for Check Point
TM
Firewall-1
®
includes
two components. The anti-virus functionality is performed by the server
component, called the Security Server. The user interface is provided by the
Management Console.
The process of Kaspersky Anti-Virus deployment is identical for the local and the
distributed Check Point
TM
Firewall-1
®
configuration.
The Security Server component is a CVP server. It is integrated into the Check
Point
TM
Firewall-1
®
application in accordance with OPSEC
TM
standards and by
default supports protected data transfer protocol.
The Security Server can be installed either on one computer with Check Point
TM
Firewall-1
®
or on any other computer connected via a TCP/IP protocol with the
computer where Check Point
TM
Firewall-1
®
is installed.
The Security Server installation option depends on the operating system installed
on the computer with Check Point
TM
Firewall-1
®
, on whether this computer
system complies with the server component installation requirements or on the
traffic transferred via Check Point
TM
Firewall-1
®
.
It should be noted that when processing a large amount of data traffic, Kaspersky
Anti-Virus may somewhat slow down the computer and this may affect the
throughput of Check Point
TM
Firewall-1
®
. Therefore we recommend installing the
Security Server on a dedicated computer for networks with large amount of
traffic.
2.2.
Deployment of anti-virus
protection
In order to create anti-virus protection system using Kaspersky Anti-
Virus 5.5 for Check Point
TM
Firewall-1
®
: