Configuring Gateway AV Settings

Clicking the Configure Gateway AV Settings button at the bottom of the Gateway Anti-Virus Global Settings table displays the Gateway AV Config View window, which allows you to configure clientless notification alerts and create aSonicWall GAV exclusion list.

Topics:
•
Configuring Gateway Anti-Virus Settings
•
Configuring HTTP Clientless Notification
•
Configuring a SonicWall GAV Exclusion List
•
Resetting Gateway Anti-Virus Settings
Configuring Gateway Anti-Virus Settings

You can enable or disable these AV settings:

•
Disable SMTP Responses - If you want to suppress the sending of email messages (SMTP) to clients from SonicWall GAV when a virus is detected in an email or attachment, select the Disable SMTP Responses check box. By default, the setting is disabled.
* 
CAUTION: The following options should not be changed without recommendation from SonicWall technical support.
•
Disable detection of EICAR test virus - Disables detection of the EICAR test virus (disabling detection of this test virus helps reduce false positives when other vendors’ client AV definitions are downloaded). By default, the setting is enabled.
•
Enable HTTP Byte-Range requests with Gateway AV - Allows usage of HTTP byte range requests when GAV is enabled. By default, the setting is enabled.
•
Enable FTP ‘REST’ requests with Gateway AV - Allows FTP REST command usage when GAV is enabled. By default, the setting is enabled.
•
Do not scan parts of files with high compression ratios. - Disables the scanning of files with high compression ratios. By default, the setting is enabled, which disables scanning of these types of files.
•
Block files with multiple levels of zip/gzip compression - Suppresses the receiving of multi-level zip/gzip files in an email attachment. By default, the setting is disabled.
Configuring HTTP Clientless Notification

The HTTP Clientless Notification feature notifies users when GAV detects an incoming threat from an HTTP server. If this option disabled, when GAV detects an incoming threat from an HTTP server, GAV blocks the threat and the user receives a blank HTTP page. Typically, users will attempt to reload the page because they are not aware of the threat. The HTTP Clientless Notification feature informs the user that GAV detected a threat from the HTTP server.

To configure this feature, check the Enable HTTP Clientless Notification Alerts check box and enter a message in the Message to Display when Blocking field, as shown below.

* 
TIP: The HTTP Clientless Notification feature is also available for SonicWall Anti-Spyware.

Optionally, you can configure the timeout for the HTTP Clientless Notification on the Security Services > Summary page under the Security Services Summary heading.

Configuring a SonicWall GAV Exclusion List

Any IP addresses listed in the exclusion list bypass virus scanning on their traffic.The Gateway AV Exclusion List section provides the ability to define a range of IP addresses whose traffic will be excluded from SonicWall GAV scanning.

* 
CAUTION: Use caution when specifying exclusions to SonicWall GAV protection.
To add an IP address range for exclusion:
1
In the Gateway AV Config View window, scroll to the Gateway AV Exclusion List section.

2
Click the Enable Gateway AV Exclusion List check box to enable the exclusion list feature. The radio button and Add… button for Use Address Range become active. You can do any or all of the following:
•
Add multiple ranges to the Gateway AV Exclusion List table as described in Adding a range to be excluded.
•
Configure or delete excluded ranges in the Gateway AV Exclusion List table, as described in Modifying a Gateway AV Exclusion List table entry
•
Delete excluded ranges in the Gateway AV Exclusion List table, as described in Deleting entries in the Gateway AV Exclusion List table
•
Select an address object to be excluded, as described in Selecting an address object to be excluded
Adding a range to be excluded
3
Click the Add… button. The Add GAV Range Entry dialog displays.

4
Enter the IP address range in the IP Address From and IP Address To fields, then click OK. You IP address range is added to the Gateway AV Exclusion List table and the window closes. The message, The configuration has been updated., displays in the status line.
5
To add other ranges to the Gateway AV Exclusion List table, repeat Step 1 through Step 4 for each range to be excluded.
Modifying a Gateway AV Exclusion List table entry
1
To change an entry in the Configure column, click the Edit icon for that entry. The Edit GAV Range Entry dialog displays.
2
Modify either or both of the IP addresses.
3
Click OK. The modifications are made to the Gateway AV Exclusion List table and the dialog closes. The message, The configuration has been updated., displays in the status line.
4
To modify multiple entries, repeat Step 1 through Step 3.
Deleting entries in the Gateway AV Exclusion List table
1
To delete an entry from the Gateway AV Exclusion List table, click the Delete icon. To delete all the excluded ranges, click the Delete All button. A warning message displays, asking for confirmation of the deletion.

2
Click OK. The entry is removed from the Gateway AV Exclusion List table and the window closes.
Selecting an address object to be excluded
1
In the Gateway AV Exclusion List section, click the Use Address Object radio button. The drop-down menu becomes available.
2
Select an address object to be excluded or create a new one.

* 
NOTE: You can select only one address object at a time to be excluded.
3
Click OK to select the address object and exit the Gateway AV Config View dialog.
Resetting Gateway Anti-Virus Settings

You can reset all your Gateway Anti-Virus Settings to factory default values by clicking the Reset Gateway AV Settings button. A warning message displays.

To completely remove your Gateway Anti-Virus Settings and restore the factory default values, click OK. Otherwise, click Cancel.