IronPort - Configuration Guide - AsyncOS 7.6.1

Chapter 8 Anti-Virus
OL-25136-01
Note For information about how and when anti-virus scanning is applied, see Email Pipeline and
Security Services, page 4-6.
Retrieving Anti-Virus Updates via HTTP
By default, the Cisco IronPort appliance is configured to check for updates every 5 minutes. For the
Sophos and McAfee anti-virus engines, the server updates from a dynamic website.
The system does not timeout on updates as long as the update is actively downloading to the appliance.
If the update download pauses for too long, then the download times out.
The maximum amount of time that the system waits for an update to complete before timing out is a
dynamic value that is defined as 1 minute less than the anti-virus update interval (defined on Security
Services > Service Updates). This configuration value aids appliances on slower connections while
downloading large updates that may take longer than 10 minutes to complete.
Monitoring and Manually Checking for Updates
Once you have accepted the license agreement and configured the global settings, you can use the
Security Services > Sophos or McAfee Anti-Virus page (GUI) or the antivirusstatus command (CLI)
to verify that you have the latest anti-virus engine and identity files installed, and to confirm when the
last update was performed.
You can also manually perform updates. From the Security Services > Sophos or McAfee Anti-Virus
page, click Update Now in the Current McAfee/Sophos Anti-Virus Files table. The appliance checks for
and downloads the latest updates.
Figure 8-1 Manually Checking for Sophos Updates
In the CLI, use the antivirusstatus command to check the status of your virus files and
antivirusupdate command to manually check for updates:
example.com> antivirusstatus
Choose the operation you want to perform:
- MCAFEE - Display McAfee Anti-Virus version information
- SOPHOS - Display Sophos Anti-Virus version information
> sophos
SAV Engine Version 3.2.07.286_4.58
IDE Serial 0
Last Engine Update Base Version
Last IDE Update Never updated
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
8-7