JUNOS : Configure Express Antivirus

Configuration Task Overview

Configuring express antivirus scanning consists of the following tasks:

• Configuring express antivirus parameters
• Configuring a UTM policy for a protocol and attaching the policy to a profile
• Attaching the UTM policy to a firewall security policy

These tasks are performed in the CLI Configuration below.

CLI Configuration

To activate the express antivirus feature using the default antivirus profile:

1. Define which scan engine you are going to use (in this case, Juniper Scan engine).

user@host# set security utm feature-profile anti-virus type juniper-express-engine

2. Define the UTM policy for the HTTP protocol to be scanned with the default "JUNOS-eav-defaults" antivirus profile.

user@host# set security utm utm-policy custom-utm-policy anti-virus http-profile JUNOS-eav-defaults

3. Apply the UTM policy to a security policy (in this example, security policy called web-access).

user@host# set security policies from-zone trust to-zone untrust policy web-access then permit application-services utm-policy custom-utm-policy