Chapter 20 Anti-Virus
NXC5200 User’s Guide
289
2
If the packets are not session connection setup packets (such as SYN, ACK and
FIN), the NXC records the sequence of the packets.
3
The scanning engine checks the contents of the packets for virus.
4
If a virus pattern is matched, the NXC removes the infected portion of the file
along with the rest of the file. The un-infected portion of the file before a virus
pattern was matched still goes through.
5
If the send alert message function is enabled, the NXC sends an alert to the file’s
intended destination computer(s).
Note: Since the NXC erases the infected portion of the file before sending it, you may
not be able to open the file.
Notes About the NXC Anti-Virus
The following lists important notes about the anti-virus scanner:
1
The NXC anti-virus scanner can detect polymorphic viruses.
2
When a virus is detected, an alert message is displayed in Microsoft Windows
computers. Refer to the
if your Windows computer does
not display the alert messages.
3
Changes to the NXC’s anti-virus settings affect new sessions (not the sessions that
already existed before you applied the changed settings).
4
The NXC does not scan the following file/traffic types:
• Simultaneous downloads of a file using multiple connections. For example,
when you use FlashGet to download sections of a file simultaneously.
• Encrypted traffic. This could be password-protected files or VPN traffic where
the NXC is not the endpoint (pass-through VPN traffic).
• Traffic through custom (non-standard) ports. The only exception is FTP traffic.
The NXC scans whatever port number is specified for FTP in the ALG screen.
• ZIP file(s) within a ZIP file.
20.1.3 Before You Begin
• Before using anti-virus, see
for how to register for the
anti-virus service.
• You may need to customize the zones (in the Network > Zone) used for the
anti-virus scanning direction.