Anti-Malware

An Anti-Malware Profile enables anti-malware protection using the Talos ClamAV virus detection engine. ClamAV® is an antivirus engine for detecting trojans, viruses, malware and other malicious threats.

The following steps will guide you creating an Anti-Malware profile and associate it with a Policy Rule.

Create the Profile

1. Navigate to Manage -> Profiles -> Network Threats
2. Click Create Intrusion Profile
3. Select Anti-malware
4. Provide a Name and Description
5. Click Manual or Automatic mode for Talos Ruleset Version selection
6. In Manual mode, select the Talos Ruleset Version from dropdown. The selected ruleset version is used by the Valtix datapath engine on all Gateways which use this profile and is not automatically updated to newer ruleset versions.
7. In Automatic mode, select how many days to delay the deployment by, after the ruleset version is published by Valtix. New rulesets are published daily by Valtix and the Gateways using this profile are automatically updated to the latest ruleset version which is N days or older, where N is the "delay by days" argument selected from the dropdown. For example, if you select to delay the deployment by 5 days on Jan 10, 2021, the Valtix Controller will select a ruleset version which was published on Jan 5th or before. Note that Valtix may not publish on some days if our internal testing with that ruleset version fails for some reason.
8. Select the desired Action to take when a match for a virus signature is found

Associate the Profile

Check this document to create/edit rules