Traditional Anti-Virus

In the settings of the Traditional Anti-Virus Software Blade for the plan, define the files that are scanned automatically for viruses, worms, and other malware. The Traditional Anti-Virus engine is based on Check Point technology for R75.x versions.

You can override the Traditional Anti-Virus Software Blade settings in a plan for a specified gateway. You must first unlock the Traditional Anti-Virus Software Blade from the plan.

Gateways that are R77.20 and higher automatically use the Threat Prevention Anti-Virus Software Blade. Gateways that are R75.x automatically use the Traditional Anti-Virus Software Blade.

To configure the Traditional Anti-Virus Software Blade settings of a plan:

  1. Go to Home > Plans.

  2. Click the plan name.

    The Edit page opens.

  3. Click Security Software Blades > Traditional Anti-Virus.

  4. Select Manage in SMP.

  5. Set the Policy:

    • Scan incoming files - Scans incoming files on the gateway.

    • Scan outgoing files - Scans sent files. This option is cleared by default.

    • Scan files between networks - Scans files sent between internal networks or from the DMZ to internal. You can filter to scan only the files that use selected protocols.

  6. Set Tracking, Log, Alert (as defined in the System Settings), None.

  7. Select Detect-only mode to monitor Traditional Anti-Virus rule matches. Clear to implement Traditional Anti-Virus on the gateways.

  8. Click Save.

To override the Traditional Anti-Virus settings set by a plan:

  1. Go to Home > Gateways.

  2. Click the gateway name.

    The Edit page opens.

  3. Click Security Software Blades > Traditional Anti-Virus.

  4. If the Anti-Virus settings are locked, click Unlock from Plan.

  5. To stop remote management of the blade, clear Manage in SMP.

  6. Set the Policy, Tracking, and Mode options (see above).

  7. Click Save.

To connect to the appliance:

  1. Go to Home > Gateways.

  2. Click the gateway name.

    The Edit page opens.

  3. Click Security Software Blades > Traditional Anti-Virus.

  4. Click Access Gateway: Traditional Anti-Virus.

    A browser page opens and shows the progress of the SMP connection to the gateway. The appliance opens on the Anti-Virus page. You can now update the local appliance.

    Note - If a local administrator is already logged in to the appliance, click OK to override that connection. Click Cancel to cancel your login attempt.