Don't have the Download Protection tab for Anti-Spyware

[JeffTQT]

Is this an option you have to turn on? When I go into Objects and Anti-Spyware under Security Profiles I click new and I do not have the Download Protection tab. Is there a reason for this? Is it a licensing thing? Version 3.1.6

[kbrazil]

Hi there,

Driveby Download Protection is configured within a File Blocking Profile.  You now have the option to set an action of "continue" in addition to block or alert.  You would configure an action of continue for executable file types in the File Block Profile.

There is no license needed for this functionality.

Cheers,

Kelly

[JeffTQT]

This is actually in the Anti-Spyware section of security profiles. Not file blocking.

[kbrazil]

I see - you are asking about normal Spyware protection in the download direction rather than the phone-home protection.  This was bundled to be a part of AntiVirus in PANOS 4.0.  You just need the Threat License and to enable an Antivirus Profile for this now.

Cheers,

Kelly

[JeffTQT]

We have version 3.1.6 and in the admin guide for it they show the Download Protection tab under the Anti-Spyware section under Security Profiles. We have the license. When I click new for a new Anti-Spyware profile there is no Download Protection tab in the popup box. 

[kbrazil]

My mistake - it was changed in PANOS 3.1.  It's been a while, so please excuse my memory.

In any case, functions do not disappear from the GUI if they are not licensed. You may see a warning message that the feature is not licensed.

Cheers,

Kelly

[JeffTQT]

How would I know if just that 1 tab is not licensed? If I go to the Device/Licenses section I have the license for Anti-Spyware.

[kbrazil]

There is no such thing as a partial license for AntiSpyware vs. AntiVirus.  There is only a Threat License which includes AntiSpyware, AntiVirus, and Vulnerability Protection.  The warning would show at the bottom of the AntiSpyware Profile if you did not have the Threat License.

Cheers,

Kelly

[JeffTQT]

Right, I have the license but for some reason I should have 3 tabs but I only have 2. According to the admin guide I should have Download Protection, Phone Home Protection, and Spyware Exception. I only have Phone Home and Spyware Exception. Why would that be?

[kbrazil · Accepted solution]

As I told you before it was moved in PANOS 3.1.  It is an error in the documentation.

Cheers,

Kelly

[JeffTQT]

Oh I misunderstood you before. Ok, that makes sense and I was just thinking to myself maybe it was a mistake with that doc. Thank you for getting back to me on this so quickly.