Related Documentation
- J, LN, SRX Series
- Monitoring Antivirus Session Status
- Additional Information
- UTM Full Antivirus Protection Feature Guide for Security Devices
Monitoring Antivirus Scan Results
Purpose
View statistics for antivirus requests, scan results, and fallback counters.
Scan requests provide
- The total number of scan request forwarded to the engine.
- The number of scan request being pre-windowed.
- The number of scan requests using scan-all mode.
- The number of scan requests using scan-by-extension mode.
Scan code counters provide
- Number of clean files.
- Number of infected files.
- Number of password protected files.
- Number of decompress layers.
- Number of corrupt files.
- When the engine is out of resources.
- When there is an internal error.
Fallback applied status provides either a log-and-permit or block result when the following has occurred
- Scan engine not ready.
- Maximum content size reached.
- Too many requests.
- Password protected file found.
- Decompress layer too large.
- Corrupt file found.
- Timeout occurred.
- Out of resources.
- Other.
Action
To view antivirus scan results using the CLI editor, enter the user@host> show security utm anti-virus statistics status command.
To view antivirus scan results using J-Web:
- Select Monitor>Security>UTM>Anti-Virus.
The following information becomes viewable in the right pane.
Antivirus license key status
- View license expiration dates.
Antivirus pattern update server settings
- View update URL (HTTP or HTTPS-based).
- View update interval.
Antivirus pattern database status
- View auto update status.
- View last result of database loading.
- If the download completes, view database version timestamp virus record number.
- If the download fails, view failure reason.
Antivirus statistics provide
- The number of scan request being pre-windowed.
- The total number of scan request forwarded to the engine.
- The number of scan requests using scan-all mode.
- The number of scan requests using scan-by-extension mode.
Scan code counters provide
- Number of clean files.
- Number of infected files.
- Number of password protected files.
- Number of decompress layers.
- Number of corrupt files.
- When the engine is out of resources.
- When there is an internal error.
Fallback applied status provides either a log-and-permit or block result when the following has occurred
- Scan engine not ready.
- Password protected file found.
- Decompress layer too large.
- Corrupt file found.
- Out of resources.
- Timeout occurred.
- Maximum content size reached.
- Too many requests.
- Other.
- You can click the Clear Anti-Virus Statistics button to clear all current viewable statistics and begin collecting new statistics.
Related Documentation
- J, LN, SRX Series
- Monitoring Antivirus Session Status
- Additional Information
- UTM Full Antivirus Protection Feature Guide for Security Devices
Published: 2014-12-07
Related Documentation
- J, LN, SRX Series
- Monitoring Antivirus Session Status
- Additional Information
- UTM Full Antivirus Protection Feature Guide for Security Devices