This feature is available on Artiva 4.40 SP142 or Artica 4.50.
Integrated Antivirus act as an Antivirus plugin ( using eCAP library ), difference is the proxy not sends content to a ClamAV engine service, the Antivirus analysis is a part of the Proxy process.
This reduce used resources by an additional service but increase memory used by the proxy itself.
With this plugin, the Antivirus send directly an Access Denied to the proxy, in this case no statistics and information are sent to the system.
The eCAP connector produce several benefits :
- Transparent antivirus scanning:
ECAP enables Proxy service to intercept and scan web traffic for viruses and malware in real-time.
By integrating ClamAV with Proxy service using ECAP, you can implement transparent scanning without requiring any modifications to client configurations or applications.
This helps protect users from malicious content without disrupting their browsing experience. - Centralized control:
Proxy service acts as a central point of control for web traffic, allowing you to enforce security policies uniformly across your network.
By integrating ClamAV solution via ECAP, you can ensure consistent and centralized antivirus scanning for all users and devices connected to the network.
¶ Enable the eCAP av scanner
The activation of the antivirus connector is very simple and is done with a click of the mouse.
- On “
Your Proxy” > “Status”, find the grey widget with the “Antivirus Proxy eCAP” title. - Click on “Install feature” button
- Click on the button “Integrated antivirus”, the setup will install both ClamAV service and the associated Daemon.
- On the left menu, click on “
Your Proxy” > “Antivirus Proxy”
You have 3 options:
- Max Scan size: The maximum size of a file to be analyzed, beyond this size, the file is not analyzed and is transmitted to the browser.
- Exclude by Mime Type: In order to speed up the performance and to avoid analyzing files at every navigation, indicate by the Mime the files that will not be analyzed
- Template: In the case of files detected in HTTP or SSL if you are using SSL Inspection, you can customize the error page if viruses are found.
¶ White list web sites:
- Websites placed in the Global White list are automatically excluded from the antivirus scanner.