McAfee MAP-3300-SWG Product Guide - Page 116

Overview of Email features Email Policies Anti-Virus Settings - Basic options Use this page to specify basic options for anti-virus scanning. Email | Email Policies | Scanning Policies [Anti-Virus] -- Anti-Virus | Basic options Web | Web Policies | Scanning Policies [Anti-Virus] -- Anti-Virus | Basic options Table 84 Option definitions Option Enable anti-virus scanning Specify which files to scan Definition When selected, scans for viruses and other threats such as worms and spyware. The option is normally set to Yes. Select No only if you have anti-virus protection elsewhere in your network. • Scan all files - offers the highest security. However, scanning takes longer and might affect performance. • Default file types - scans only the most susceptible types of files. • Defined file types - scans only the types in the list. Scan archive files (ZIP, ARJ, RAR ...) Find unknown file viruses Find unknown macro viruses to Remove all macros from document files Enable McAfee Global Threat Intelligence file reputation with Sensitivity level When selected, scans this type of file. However, scanning takes longer and might affect performance. The contents of these files are harmful only when files inside are extracted, and can then by scanned by on-access scanners in individual computers in your network. When selected, does extra analysis to find any virus-like behavior. When selected, take actions against macros in documents. Macros inside documents are a popular target for virus writers. Enables McAfee Global Threat Intelligence file reputation on your appliance. McAfee Global Threat Intelligence file reputation complements the DAT-based signatures by providing the appliances access to millions of cloud-based signatures. This reduces the delay between McAfee detecting a new malware threat and its inclusion in DAT files, providing broader coverage. The sensitivity levels enable you to balance the risk of missing potentially harmful content (low settings) with the risk of false positive detections (high settings). For gateway appliances, the recommended sensitivity level is Medium. Attempt to clean If cleaning succeeds If cleaning fails Use the default alert And also If a file is zero bytes after cleaning Make deobfuscated content available to other scanners When selected, the infection inside the item is removed, if possible. When deselected, the entire item is removed. Provides several actions after cleaning succeeds. Provides several actions if the cleaning failed. When selected, issues the default alert upon detection. When deselected, allows you to click the link, then change the text of the alert. Provides several further actions. Provides an action against a file that is now empty. Zero-byte files cannot carry threats but you might prefer to remove the files if they confuse users. When selected, provides extra protection against unwanted content. The techniques that detect hidden viruses and malware are made available to content scanning. 116 McAfee Email and Web Security Appliances 5.6.0 Product Guide