Cisco Cisco Email Security Appliance C680 User Guide

You can now configure anti-virus settings on a per-recipient basis. See 

For information about how and when anti-virus scanning is applied, see 

By default, the Cisco IronPort appliance is configured to check for updates every 
5 minutes. For the Sophos and McAfee anti-virus engines, the server updates from 
a dynamic website. 

The system does not timeout on updates as long as the update is actively 
downloading to the appliance. If the update download pauses for too long, then 
the download times out.

The maximum amount of time that the system waits for an update to complete 
before timing out is a dynamic value that is defined as 1 minute less than the 
anti-virus update interval (defined on Security Services > Service Updates). This 
configuration value aids appliances on slower connections while downloading 
large updates that may take longer than 10 minutes to complete. 

Once you have accepted the license agreement and configured the global settings, 
you can use the Security Services > Sophos or McAfee Anti-Virus page (GUI) or 
the 

antivirusstatus

 command (CLI) to verify that you have the latest anti-virus 

engine and identity files installed, and to confirm when the last update was 
performed.

You can also manually perform updates. From the Security Services > Sophos or 
McAfee Anti-Virus page, click Update Now in the Current McAfee/Sophos 
Anti-Virus Files table. The appliance checks for and downloads the latest updates.