IronPort - Configuration Guide - AsyncOS 7.6.1

Enabling Virus Scanning and Configuring Global Settings
Overview
8-6
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Chapter 8 Anti-Virus
To perform virus scanning, you must first enable virus scanning on the Cisco IronPort appliance. After
you enable the virus scanning engine or engines, you can apply the virus scanning engine to incoming
or outgoing mail policies.
You can enable a virus scanning engine when you run the System Setup Wizard. Or, you can enable and
modify the virus scanning engine global configuration settings via Security Services > Sophos/McAfee
Anti-Virus pages (GUI) or the antivirusconfig command (CLI). You can configure the following
global settings:
Globally enable McAfee or Sophos anti-virus scanning for the entire system.
Specify the anti-virus scanning timeout value.
In addition to the two values on the global settings page, you can further configure the anti-virus settings
via the Service Updates page (available from the Security Services tab). Additional settings include:
How (from which URL) the system will receive anti-virus updates. The virus definitions are updated
from a dynamic URL. If you have strict firewall policies, you may need to configure your Cisco
IronPort appliance to obtain updates from a static URL.
How frequently the system checks for new virus definitions. (You define the number of minutes
between checks.)
You can optionally enable a proxy server for obtaining anti-virus updates.
For more information about configuring these additional settings, see Service Updates, page 15-10.
Enabling Anti-Virus Scanning and Configure Global Settings
Step 1 Select Security Services > McAfee.
Or
Select Security Services > Sophos.
Step 2 Click Enable. The license agreement page is displayed.
Note Clicking Enable enables the feature globally for the appliance. However, you must later enable
per-recipient settings in Mail Policies.
Step 3 After reading the agreement, scroll to the bottom of the page and click Accept to accept the agreement.
Step 4 Click Edit Global Settings.
Step 5 Choose a maximum virus scanning timeout value.
Configure a timeout value for the system to stop performing anti-virus scanning on a message. The
default value is 60 seconds.
Step 6 Submit and commit your changes.
Step 7 You can now configure anti-virus settings on a per-recipient basis. See Configuring Virus Scanning
Actions for Users, page 8-8.
OL-25136-01