Virus-Detected Notifications
Virus-Detected notification is used to notify the sender or the recipient about the detected viruses or the scanning errors. For more information, see the following topics:
Understanding Protocol-Only Virus-Detected Notifications
The Protocol-Only Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, when content is blocked because a virus is found or a scan error occurs, the client generally still receives a successful response code but with modified content (file replacement) containing a warning message. But with protocol-only notifications, a protocol-specific error code may be returned to the client. This way, the client determines that a virus was detected rather than interpreting that a file transfer succeeded.
Configuring Protocol-Only Virus-Detected Notifications (CLI Procedure)
The Protocol-Only Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, to configure protocol-only virus-detected notifications, use the following CLI configuration statements:
security utm feature-profile anti-virus kaspersky-lab-engine profile name {
notification-options {
virus-detection {
type { protocol-only | message }
}
fallback-block {
type { protocol-only | message }
}
}
}
}
The [edit security utm feature-profile] hierarchy
level is deprecated in Junos OS Release 18.2R1. For more information,
see Content Security Overview.
Understanding E-Mail Virus-Detected Notifications
The E-Mail Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, for mail protocols (SMTP, POP3, IMAP), e-mail notification is used to notify the sender or the recipient about the detected viruses or the scanning errors. There are three settings for e-mail notifications:
virus-detection/notify-mail-sender — This setting is used when a virus is detected. If it is enabled, an e-mail is sent to the sender upon virus detection.
fallback-block/notify-mail-sender — This setting is used when other scan codes or scanning errors are returned and the message is dropped. If it is enabled, an e-mail is sent to the sender when an error code is returned.
fallback-non-block/notify-mail-recipient — This setting is used when other scan codes or scanning errors are returned and the message is passed. If it is enabled, the e-mail sent to the recipient is tagged when an error code is returned.
Configuring E-Mail Virus-Detected Notifications (CLI Procedure)
The E-Mail Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, to configure the system to send e-mail notifications when viruses are detected, use the following CLI configuration statements:
security utm feature-profile anti-virus kaspersky-lab-engine profile name {
notification-options {
virus-detection {
notify-mail-sender
}
fallback-block {
notify-mail-sender
}
fallback-non-block {
notify-mail-recipient
}
}
}
}
The [edit security utm feature-profile] hierarchy
level is deprecated in Junos OS Release 18.2R1. For more information,
see Content Security Overview.
Understanding Custom Message Virus-Detected Notifications
The Custom Message Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, custom message notifications are mainly used in file replacement or in a response message when the antivirus scan result is to drop the file. When using custom messages, you can provide a customized message in the message content you can define customized subject tags.
Custom-message in fallback-nonblock is used only by mail protocols.
Configuring Custom Message Virus-Detected Notifications (CLI Procedure)
The Custom Message Virus-Detected Notifications are not supported from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1 onwards. For previous releases, to configure the system to send custom messages when viruses are detected, use the following CLI configuration statements:
security utm feature-profile anti-virus kaspersky-lab-engine profile name {
notification-options {
virus-detection {
custom-message msg
custom-message-subject subject-msg
}
fallback-block {
custom-message msg
custom-message-subject subject-msg
}
fallback-non-block {
custom-message msg
custom-message-subject subject-msg
}
}
}
}
The [edit security utm feature-profile] hierarchy
level is deprecated in Junos OS Release 18.2R1. For more information,
see Content Security Overview.
Change History Table
Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.