Note: Juniper Networks supports internal (scan engine embedded in the device) or external antivirus (AV) on select devices.
ScreenOS provides internal AV scanning for popular public Instant Messaging (IM) applications. Edit the following options to configure an AV profile for scanning IM traffic:
Profile name: Displays the AV profile name.
Message: Select the checkbox to scan instant messages.
File: Select the checkbox to scan files.
Scan All: Select this mode to scan all traffic at all times.
Scan Intelligent: Select this mode to use an algorithm that scans the traffic for the most common and prevalent viruses and ensures the file type is true and that it doesn’t infect other files directly. Although this mode is not as broad in coverage as Scan All, it provides better performance. Scan Intelligent mode is the default.
Scan By Extension: Select this mode if you want all scanning decisions to be based on the file extensions in the traffic.
If a message contains a compressed .zip file that contains another compressed .zip file, there are two compression layers, and decompressing both files requires a decompress-layer setting of 2. Valid settings are between 1 and 4, so the AV scanner can decompress up to 4 layers of compressed files.
Note: Some protocols use a content encoding layer when transmitting data. The AV scan engine decodes this layer before scanning for viruses. Decoding this content is considered one layer of decompression.
Best Effort: Select this option to process traffic to the best effort using existing protocol knowledge.
Pass: Select this option to pass the traffic without scanning for viruses.
To Scan Yahoo! Messenger
Traffic
Message: Select the checkbox to scan instant messages.
File: Select the checkbox to scan files.
Scan All: Select this mode to scan all traffic at all times.
Scan Intelligent: Select this mode to use an algorithm that scans the traffic for the most common and prevalent viruses and ensures the file type is true and that it doesn’t infect other files directly. Although this mode is not as broad in coverage as Scan All, it provides better performance. Scan Intelligent mode is the default.
Scan By Extension: Select this mode if you want all scanning decisions to be based on the file extensions in the traffic.
If a message contains a compressed .zip file that contains another compressed .zip file, there are two compression layers, and decompressing both files requires a decompress-layer setting of 2. Valid settings are between 1 and 4, so the AV scanner can decompress up to 4 layers of compressed files.
Note: Some protocols perform content encoding when transmitting data. The AV scan engine decodes this layer before scanning for viruses. Decoding this content is considered one layer of decompression.
Best Effort: Select this option to process traffic to the best effort using existing protocol knowledge.
Pass: Select this option to pass the traffic without scanning for viruses.
Message: Select the checkbox to scan all instant messages.
File: Select the checkbox to scan files.
Scan All: Select this mode to scan all traffic at all times.
Scan Intelligent: Select this mode to use an algorithm that scans the traffic for the most common and prevalent viruses and ensures the file type is true and that it does not infect other files directly. Although this mode is not as broad in coverage as Scan All, it provides better performance. Scan Intelligent mode is the default.
Scan By Extension: Select this mode if you want all scanning decisions to be based on the file extensions in the traffic.
If a message contains a compressed .zip file that contains another compressed .zip file, there are two compression layers, and decompressing both files requires a decompress-layer setting of 2. Valid settings are between 1 and 4, so the AV scanner can decompress up to 4 layers of compressed files.
Note: Some protocols use a content encoding layer when transmitting data. The AV scan engine decodes this layer before scanning for viruses. Decoding this content is considered one layer of decompression.
Best Effort: Select this option to process traffic to the best effort using existing protocol knowledge.
Pass: Select this option to pass the traffic without scanning for viruses.