You want to configure internal antivirus on your ScreenOS firewall.
Set the antivirus pattern type:
set av scan-mgr pattern-type standard
Update the signature file the first time manually:
exec av scan-mgr pattern-update
Link the default antivirus filter profile to a policy:
set policy id 100 from "Trust" to "Untrust" "Any" "Any" "Any" nat src permit set policy id 100 set av ns-profile exit
The branch office model of the SSG Series and the NS-5GT features optional integrated antivirus scanning by Kaspersky. It is a very powerful antivirus scanner, delivering high performance for smaller sites. In addition to in-the-wild and polymorphic virus protection, the Kaspersky engine also protects from spyware and phishing: you need a license key and valid subscription for this feature. Note that some models may need a memory upgrade.
The antivirus scanner scans the File Transfer Protocol (FTP), HyperText Transfer Protocol (HTTP; including web mail), Post Office Protocol version 3 (POP3), Internet Message Access Protocol (IMAP), and Simple Mail Transfer Protocol (SMTP), as well as the peer-to-peer applications AOL Messenger, ICU, MSN Messenger, and Yahoo! Messenger. The scanner is also able to look into multiple levels of compressed packages.
The first step in configuring antivirus is to choose the virus definition package. Due to memory limitations, some models may be able to load only the standard set. The standard method is the most ...