How to Configure Virus Scanning in the Firewall for SMB

Virus scanning covers V2 and V3 for SMB. While a scan is running, data transfer on the session is stopped completely. If malware is found, the whole TCP session is terminated. Content Detection is performed on all files.

Step 1. Configure the Virus Scanner Engine

Enable and configure the virus scanner. Barracuda CloudGen Firewall F18 and larger support the Avira AV engine.

1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Virus-Scanner > Virus Scanner Settings.
2. Click Lock.
3. Enable Avira AV by selecting Yes from the Enable Avira Engine list.
4. Click Send Changes and Activate.

Step 2. Enable the Virus Scanner to Scan SMB Related Traffic

1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Security Policy.
2. Click Lock.
3. Scroll down to the section Virus Scanner Configuration.
4. Select the check box for SMB.
5. Click Send Changes.
6. Click Activate.
   

Step 3. Edit an Access Rule to Enable Virus Scanning for Session-Related SMB Traffic

Virus scanning can be enabled for all Pass and Dst NAT access rules.

1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Forwarding Rules.
2. Click Lock.
3. Double-click to edit the PASS or Dst NAT access rule.
4. Click Application Policy link and select:
   
   • Application Control – required. 
   • TLS Inspection – optional.
   • Virus Scan – required.
     
5. If configured, select a policy from the SSL Inspection Policy drop-down list. For more information, see TLS Inspection in the Firewall.
6. In the left menu inside of the Edit Rule window, click Advanced.
7. Navigate to the first entry Generic TCP Proxy in the TCP Policy section.
8. For the Generic TCP Proxy entry, click in the second column and select ON.
   
9. Click OK.
10. Click Send Changes and Activate.