Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 268 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AV Protection not functioning properly

jmelton 
Firmware version:		7.009

Pattern version:		4836


I am discouraged to see that I am able to download an Eicar (http://www.eicar.com) test file to my pc without the Astaro blocking it.  In the past the Astaro sucessfully blocked this, so not sure what the deal is.  

I have a HTTP proxy profile setup for certain members of management that allow them unrestricted access to sites, but still blocking Spyware and doing AV Scanning..
  
My Filter Action: 
	

Unrestricted

Mode:	Blacklist

Spyware is	blocked

Anti-Virus scanning	Dual Scan, Single Scan

Filter Assignment: 
No Restrictions

User/Groups	

	Always

Filter Action:	Unrestricted

Proxy Profile: 
Management/Servers	[]

Transparent mode enabled

Source networks:	Management Group

Server WebAccess Group

Filter Assigments:	No Restrictions

Fallback action:	Unrestricted


My PC's IP address definition is included in the Source network "Management Group" Anyone else experiencing this or have any ideas??  I also just put an incident in with support, so I'll update this once I hear back..

**EDIT: It appears to be an issue only with the Proxy Profile, as the default content filter successfully blocks the eicar test file..


This thread was automatically locked due to age.
  • 0
    Turns out I had an exception setup incorrectly.  The exceptions use an OR statement, I had mistaken it for using an AND statement.  I thought I had certain sites visited by the "management group" excluded from AV scanning, but it was actually excluding management group OR those sites from being AV scanned..