Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 460
 
8-6
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 8      Anti-Virus
Enabling Virus Scanning and Configuring Global Settings 
To perform virus scanning, you must first enable virus scanning on the Cisco IronPort appliance. After 
you enable the virus scanning engine or engines, you can apply the virus scanning engine to incoming 
or outgoing mail policies.
Overview
You can enable a virus scanning engine when you run the System Setup Wizard. Or, you can enable and 
modify the virus scanning engine global configuration settings via Security Services > Sophos/McAfee 
Anti-Virus pages (GUI) or the 
antivirusconfig
 command (CLI). You can configure the following 
global settings: 
  •
Globally enable McAfee or Sophos anti-virus scanning for the entire system.
  •
Specify the anti-virus scanning timeout value. 
In addition to the two values on the global settings page, you can further configure the anti-virus settings 
via the Service Updates page (available from the Security Services tab). Additional settings include:
  •
How (from which URL) the system will receive anti-virus updates. The virus definitions are updated 
from a dynamic URL. If you have strict firewall policies, you may need to configure your Cisco 
IronPort appliance to obtain updates from a static URL. 
  •
How frequently the system checks for new virus definitions. (You define the number of minutes 
between checks.)
  •
You can optionally enable a proxy server for obtaining anti-virus updates. 
For more information about configuring these additional settings, see 
Enabling Anti-Virus Scanning and Configure Global Settings
Step 1
Select Security Services > McAfee.
Or
Select Security Services > Sophos.
Step 2
Click Enable. The license agreement page is displayed. 
Note
Clicking Enable enables the feature globally for the appliance. However, you must later enable 
per-recipient settings in Mail Policies. 
Step 3
After reading the agreement, scroll to the bottom of the page and click Accept to accept the agreement.
Step 4
Click Edit Global Settings.
Step 5
Choose a maximum virus scanning timeout value.
Configure a timeout value for the system to stop performing anti-virus scanning on a message. The 
default value is 60 seconds. 
Step 6
Submit and commit your changes.
Step 7
You can now configure anti-virus settings on a per-recipient basis. See