Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual download pdf (Page 174)

Chapter 13 Antivirus control

174

Warning

When handling ﬁles in the quarantine directory, please consider carefully each action

you take, otherwise a virus might be activated and the WinRoute host could be attacked

by the virus!

• Alert the client — WinRoute alerts the user who attempted to download the ﬁle by

an email message warning that a virus was detected and download was stopped for

security reasons.

WinRoute sends alert messages under the following circumstances: The user is authen-

ticated and connected to the ﬁrewall, a valid email address is set in a corresponding

user account (see chapter 15.1) and the SMTP server used for mail sending is conﬁg-

ured correctly (refer to chapter 18.3).

Note: Regardless of the fact whether the Alert the client option is used, alerts can

be sent to speciﬁed addresses (e.g. addresses of network administrators) whenever

a virus is detected. For details, refer to chapter 19.4.

In the If the transferred ﬁle cannot be scanned section, actions to be taken when the antivirus

check cannot be applied to a ﬁle (e.g. the ﬁle is compressed and password-protected, damaged,

etc.):

• Deny transmission of the ﬁle — WinRoute will consider these ﬁles as infected and deny

their transmission.

Hint

It is recommended to combine this option with the Move the ﬁle to quarantine function

— the WinRoute administrator can extract the ﬁle and perform manual antivirus check

in response to user requests.

• Allow the ﬁle to be transferred — WinRoute will treat compressed password-protected

ﬁles and damaged ﬁles as trustful (not infected).

Generally, use of this option is not secure. However, it can be helpful for example

when users attempt to transmit big volume of compressed password-protected ﬁles

and the antivirus is installed on the workstations.

HTTP and FTP scanning rules

These rules specify when antivirus check will be applied. By default (if no rule is deﬁned), all

objects transmitted by HTTP and FTP are scanned.

WinRoute contains a set of predeﬁned rules for HTTP and FTP scanning. By default, all exe-

cutable ﬁles as well as all Microsoft Oﬃce ﬁles are scanned. The WinRoute administrator can

change the default conﬁguration.

Scanning rules are ordered in a list and processed from the top. Arrow buttons on the right can

be used to change the order. When a rule which matches the object is found, the appropriate

action is taken and rule processing is stopped.

New rules can be created in the dialog box which is opened after clicking the Add button.

1 2 ... 169 170 171 172 173 174 175 176 177 178 179 ... 367 368

Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual Page 174