JUNOS : Configure Antivirus Full File-Based Scanning

Setting Up Automatic Updates

By default, the antivirus pattern database is configured to automatically update once every 60 minutes.  You also can specify the email notification sent to the administrator when the pattern update is complete.

1. Configure the pattern-updates at a different interval for the Kaspersky scan engine.

user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update url http://update.juniper-updates.net/AV/SRX240
user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update interval 120

Note: "SRX240” in the URL is the platform name. This part of the URL is different and platform specific for each platform. (Other than the platform name, you should not change this URL unless you are experiencing problems with it and have called for support.)

Alternately, you can configure the pattern update manually by entering the following operational command:

user@host> request security utm anti-virus kaspersky-lab-engine pattern-update

2. Define the pattern-update email.

user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update email-notify admin-email "admin@juniper.net"
user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update email-notify custom-message "Pattern UPDATE Done"
user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update email-notify custom-message-subject "AV UPDATE COMPLETE"

CLI Configuration

To activate full file-based antivirus using the default antivirus profile:

1. Define what scan engine you are going to use (in this example, Kaspersky Lab engine).

user@host# set security utm feature-profile anti-virus type kaspersky-lab-engine

2. Define the UTM policy for the HTTP protocol to be scanned with the full file-based default profile.

user@host# set security utm utm-policy custom-utm-policy anti-virus http-profile junos-av-defaults


Note:  A separate anti-virus profile is needed for each protocol.  The available protocols include HTTP, SMTP, POP3, and IMAP.

3. Apply the UTM policy to a security policy (in this example, security policy called web-access).

user@host# set security policies from-zone trust to-zone untrust policy web-access then permit application-services utm-policy custom-utm-policy