JUNOS: Configure Antivirus Full File-Based Scanning (Kaspersky)

CLI

To verify license installation using the CLI:

1. Run the show system license command, and look for av_key_kaspersky_engine.

user@host> show system license
License usage:
Licenses Licenses Licenses Expiry
Feature name used installed needed
av_key_kaspersky_engine 0 1 0 2010-12-31 00:00:00 UTC

2. If no license is installed, install the license by entering the following command:

user@host> request system license add terminal

3. Copy the text from the license file, and paste it at the command prompt.

Setting Up Automatic Updates

By default, the antivirus pattern database is configured to automatically update once every 60 minutes.  You also can specify the email notification sent to the administrator when the pattern update is complete.

1. Configure the pattern-updates at a different interval for the Kaspersky scan engine.

user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update url http://update.juniper-updates.net/AV/SRX240
user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update interval 120

Note: "SRX240” in the URL is the platform name. This part of the URL is different and platform specific for each platform. (Other than the platform name, you should not change this URL unless you are experiencing problems with it and have called for support.)

Alternately, you can configure the pattern update manually by entering the following operational command:

user@host> request security utm anti-virus kaspersky-lab-engine pattern-update

2. Define the pattern-update email.

user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update email-notify admin-email "admin@juniper.net"
user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update email-notify custom-message "Pattern UPDATE Done"
user@host# set security utm feature-profile anti-virus kaspersky-lab-engine pattern-update email-notify custom-message-subject "AV UPDATE COMPLETE"