topic Re: Don't have the Download Protection tab for Anti-Spyware in General Topics

Don't have the Download Protection tab for Anti-Spyware

JeffTQT — Wed, 28 Sep 2011 15:00:31 GMT

Is this an option you have to turn on? When I go into Objects and Anti-Spyware under Security Profiles I click new and I do not have the Download Protection tab. Is there a reason for this? Is it a licensing thing? Version 3.1.6

Re: Don't have the Download Protection tab for Anti-Spyware

kbrazil — Wed, 28 Sep 2011 15:42:57 GMT

Hi there,

Driveby Download Protection is configured within a File Blocking Profile. You now have the option to set an action of "continue" in addition to block or alert. You would configure an action of continue for executable file types in the File Block Profile.

There is no license needed for this functionality.

Cheers,

Kelly

Re: Don't have the Download Protection tab for Anti-Spyware

JeffTQT — Wed, 28 Sep 2011 15:49:31 GMT

This is actually in the Anti-Spyware section of security profiles. Not file blocking.

Re: Don't have the Download Protection tab for Anti-Spyware

kbrazil — Wed, 28 Sep 2011 15:54:59 GMT

I see - you are asking about normal Spyware protection in the download direction rather than the phone-home protection. This was bundled to be a part of AntiVirus in PANOS 4.0. You just need the Threat License and to enable an Antivirus Profile for this now.

Cheers,

Kelly

Re: Don't have the Download Protection tab for Anti-Spyware

JeffTQT — Wed, 28 Sep 2011 16:24:33 GMT

We have version 3.1.6 and in the admin guide for it they show the Download Protection tab under the Anti-Spyware section under Security Profiles. We have the license. When I click new for a new Anti-Spyware profile there is no Download Protection tab in the popup box.

Re: Don't have the Download Protection tab for Anti-Spyware

kbrazil — Wed, 28 Sep 2011 16:55:48 GMT

My mistake - it was changed in PANOS 3.1. It's been a while, so please excuse my memory.

In any case, functions do not disappear from the GUI if they are not licensed. You may see a warning message that the feature is not licensed.

Cheers,

Kelly

Re: Don't have the Download Protection tab for Anti-Spyware

JeffTQT — Wed, 28 Sep 2011 17:46:30 GMT

How would I know if just that 1 tab is not licensed? If I go to the Device/Licenses section I have the license for Anti-Spyware.

Re: Don't have the Download Protection tab for Anti-Spyware

kbrazil — Wed, 28 Sep 2011 18:13:29 GMT

There is no such thing as a partial license for AntiSpyware vs. AntiVirus. There is only a Threat License which includes AntiSpyware, AntiVirus, and Vulnerability Protection. The warning would show at the bottom of the AntiSpyware Profile if you did not have the Threat License.

Cheers,

Kelly

Re: Don't have the Download Protection tab for Anti-Spyware

JeffTQT — Wed, 28 Sep 2011 18:15:57 GMT

Right, I have the license but for some reason I should have 3 tabs but I only have 2. According to the admin guide I should have Download Protection, Phone Home Protection, and Spyware Exception. I only have Phone Home and Spyware Exception. Why would that be?

Re: Don't have the Download Protection tab for Anti-Spyware

kbrazil — Wed, 28 Sep 2011 18:18:23 GMT

As I told you before it was moved in PANOS 3.1. It is an error in the documentation.

Cheers,

Kelly

Re: Don't have the Download Protection tab for Anti-Spyware

JeffTQT — Wed, 28 Sep 2011 18:20:42 GMT

Oh I misunderstood you before. Ok, that makes sense and I was just thinking to myself maybe it was a mistake with that doc. Thank you for getting back to me on this so quickly.