Anti virus profile not able to scan a file?

[weezy]

While Studying PCNSE and the topic is 

Using PA FW AV & WildFire

I notice that the anti virus profile was not able to block the eicar.com file that keith barker downloaded on the FW.

He created a decryption policy in order to block that file.

On our FW on office we don't use decryption services because it is a CPU memory intensive. Although we have a Cisco Umbrella use by security team to block files.

i'm curious on our FW if someone downloaded a file that contains a virus, does our AV profile, Anti Spyware, Anti Malware and vulnerability protection will act the same as the FW of keith did?

Please let me know if you have any suggestions.

[reaper]

eicar is a test file that is explicitly excluded from scanning so it wont be blocked

if you don't have decryption enabled, you'll also not be able to see 99% of all internet activity's payload so wont be able to block malware

[weezy]

Hi Reaper,

we have AV profile, Anti Spyware, Anti Malware and vulnerability protection. On our FW on office we don't use decryption services because it is a CPU memory intensive. Although we have a Cisco Umbrella use by security team to block files.