Administrator's Guide - Kerio Software Archive

Antivirus control
• Allow the file to be transferred — Kerio Control will treat compressed
password-protected files and damaged files as trustful (not infected).
Generally, use of this option is not secure. However, it can be helpful for example
when users attempt to transmit big volume of compressed password-protected files
and the antivirus is installed on the workstations.
HTTP and FTP scanning rules
These rules specify when antivirus check will be applied. By default (if no rule is defined), all
objects transmitted by HTTP and FTP are scanned.
Kerio Control contains a set of predefined rules for HTTP and FTP scanning. By default, all
executable files as well as all Microsoft Office files are scanned. The firewall administrator can
change the default configuration.
Scanning rules are ordered in a list and processed from the top. Arrow buttons on the right can
be used to change the order. When a rule which matches the object is found, the appropriate
action is taken and rule processing is stopped.
New rules can be created in the dialog box which is opened after clicking the Add button.
Figure 14.8
Definition of an HTTP/FTP scanning rule
Description
Comment on the rule (for use of the firewall administrator).
Condition
Condition of the rule:
• HTTP/FTP filename
— this option filters out certain filenames (not entire URLs) transmitted by FTP
or HTTP (e.g. *.exe, *.zip, etc.).
198