Analyzing Files" Tab - Stormshield SN series Configuration Manual

Proxy
Main commands
The button Modify all commands allows authorizing, rejecting or checking all commands.
Command
Action
Other commands allowed
Command
IPS
Allowed SMTP commands
List of additional authorized SMTP commands. It is possible to Add or Delete commands.
Prohibited SMTP commands
List of prohibited SMTP commands. It is possible to Add or Delete commands.

"Analyzing files" tab

Maximum size for
antivirus and
sandboxing scan (KB)
When manually defining a size limit for analyzed data, ensure that all values are coherent.
The total memory space corresponds to a common space for all the resources reserved for
the Antivirus service. If you define the size limit for analyzed data on SMTP as 100% of the
total size, no other files can be analyzed at the same time.
Action on messages
This zone defines the behavior of the antivirus module when certain events occur.
When a virus is
detected
When the antivirus
scan fails
When data collection
fails
Page 262/448
Indicates the name of the command.
Indicates the action performed.
By default, all commands not defined in the RFCs are prohibited. However, some mail
systems use additional non-standard commands. You can therefore add these
commands in order to let them pass through the firewall.
The buttons Add and Delete allow you to modify the list of commands.
This option depends on the hardware capacities of each firewall model but may be
adapted according to the needs of the company.
WARNING
This field contains 2 options. "Pass" and "Block". By selecting "Block", the analyzed file
will not be sent. By selecting Pass, the antivirus will send the file event it has been
found to be infected.
The option Pass without scanning defines the behavior of the antivirus module if the
analysis of the file it is scanning fails.
If Block has been specified, the file being scanned will not be sent.
If Pass without scanning has been specified, the file being scanned will be sent.
This option defines the behavior of the antivirus module when certain events occur.
Examples:
If the hard disk has reached its capacity, information will not be downloaded.
The maximum size that the file can reach for the antivirus scan is restricted (1000KB).
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
PROTOCOLS