If the firewall detects a virus, the firewall should block the threat. To do that, set the ftp, http, smb, and smtp decoders to “reset-both” in the Action column in every Antivirus profile. Resetting both ends of the connections is better than resetting only the client or only the server unless there are business reasons not to reset one end of the connection. You can tighten security even more by also setting the imap and pop3 decoder Action to “reset-both”. If you are using predefined profiles and if they are failing BP checks you can clone them or create custom profile and do the necessary changes to pass BP checks.
