topic Anti virus profile not able to scan a file? in Next-Generation Firewall Discussions

Anti virus profile not able to scan a file?

weezy — Mon, 06 Oct 2025 01:52:43 GMT

While Studying PCNSE and the topic is

Using PA FW AV & WildFire

I notice that the anti virus profile was not able to block the eicar.com file that keith barker downloaded on the FW.

He created a decryption policy in order to block that file.

On our FW on office we don't use decryption services because it is a CPU memory intensive. Although we have a Cisco Umbrella use by security team to block files.

i'm curious on our FW if someone downloaded a file that contains a virus, does our AV profile, Anti Spyware, Anti Malware and vulnerability protection will act the same as the FW of keith did?

Please let me know if you have any suggestions.

Re: Anti virus profile not able to scan a file?

reaper — Mon, 06 Oct 2025 11:54:16 GMT

eicar is a test file that is explicitly excluded from scanning so it wont be blocked

if you don't have decryption enabled, you'll also not be able to see 99% of all internet activity's payload so wont be able to block malware

Re: Anti virus profile not able to scan a file?

weezy — Tue, 07 Oct 2025 00:28:31 GMT

Hi Reaper,

we have AV profile, Anti Spyware, Anti Malware and vulnerability protection. On our FW on office we don't use decryption services because it is a CPU memory intensive. Although we have a Cisco Umbrella use by security team to block files.