topic Re: virus siganture fine control in General Topics

virus siganture fine control

willstech — Tue, 21 Jun 2011 09:07:25 GMT

Hello all.

I’d like to fine control about virus signature. Is it possible??

if virus AAA comes into network through HTTP, i'd like to trigger with alert.

(HTTP is a block as default. and i set a default rule.)
but virus BBB also comes into network through HTTP, i'd like to block.

Please let me know the best practice of reach my goal, if it is impossible.

Thanks,

Eugene.

Re: virus siganture fine control

dwhyte — Tue, 28 Jun 2011 22:24:53 GMT

Sure....If you go into the anti-spyware profile, just change the Anti-spyware from simple to custom

Re: virus siganture fine control

willstech — Thu, 30 Jun 2011 09:10:16 GMT

no..no..

i already know that anti-spyware is available to fine tune.

what i want is a fine tune of anti-virus.

l'd like to know the way, if it is possible to fine tune with cli or other ways.

Please let me know about fine tuning of Anti-Virus.

Thanks,

Eugene.

Re: virus siganture fine control

pkruse — Tue, 05 Jul 2011 19:11:57 GMT

Though its possible to fine tune from the CLI the act of it prohibitively difficult, each string execution would be extremely long as you can only modify a single line at a time. And just to make it more difficult you need to realize that you will be dealing with potentially millions of lines. For this reason there is no "how to" document and we in support would be hard pressed to troubleshoot your efforts, more likely if a problem is encountered we would revert rather than debug.

~Phil