Security Services
Configuring Anti-Virus
Cisco ISA500 Series Integrated Security Appliances Administration Guide 303
7
Refer to the foll owing to pics:
•General Anti-Virus Settings, page 303
•Configuring Advanced Anti-Virus Settings
•Configuring HTTP Notification, page 307
•Configuring Email Notification, page 307
•Updating Anti-Virus Signatures, page 308
General Anti-Virus Settings
Use the General Settings page to enable or disable Anti-Virus, specify the zones
to scan for viruses, and configure the preventive actions for different types of
traffic, and set the maximum file size to scan.
STEP 1 Click Se curity Services > Anti-Virus > General Settings.
STEP 2 Click On to enable Anti-Virus, or click Off to disable it .
STEP 3 In the Zone to Scan area, specify the zones to scan the viruses:
•WAN Zon e: Choose this option to scan the viruses for all incoming and
outgoing traffic for the WAN zone.
•WAN+VP N Zon e: Choose this option to scan the viruses for all incoming and
outgoing traffic for both WAN and VPN zones.
•All Zone: Choose this option to scan the viruses for all incoming and
outgoing traffic for all zones.
STEP 4 In the Applications to Scan area, per form the following tasks to scan for viruses on
your network:
•Enable: Check the box in this column to scan for viruses over a protocol.
•Logging: Check the box in this column to log the events when viruses are
detected.
To log Anti-Virus events, you must first check the Logging box for the
protocols, and then go to the Device Management > Logs pages to configure
the log settings and log facilities. See Log Management, page 442.
- To save Anti-Virus logs to the local syslog daemon, you must enable the
Log feature, set the log buffer size and the severity level for local logs, and
then enable the Local Log settings for the Anti-Virus facility.