- Kerio WinRoute Firewall Administrator's Guide

Chapter 11

Antivirus control

WinRoute provides antivirus check of objects (ﬁles) transmitted by HTTP, FTP, SMTP and

POP3 protocols. In case of HTTP and FTP protocols, the WinRoute administrator can

specify which types of objects will be scanned.

WinRoute is also distributed in a special version which includes integrated McAfee an-

tivirus. Besides the integrated antivirus, WinRoute supports several antivirus programs

developed by various companies, such as Eset Software, Grisoft, F-Secure, etc.). Antivirus

licenses must meet the license policy of a corresponding company (usually, the license

is limited by the same or higher number of users as WinRoute is licensed for, or a server

license).

Since 6.2.0, WinRoute enables to combine the integrated McAfee antivirus with a sup-

ported external antivirus. In such a case, transferred ﬁles are checked by both an-

tiviruses (so called dual antivirus control). This feature reduces the risk of letting in

a harmful ﬁle.

However, using of two antiviruses at a time also decreases the speed of ﬁrewall’s per-

formance. It is therefore highly recommended to consider thoroughly which method

of antivirus check should be used and to which protocols it should be applied and, if

possible and desired, to try the conﬁguration in the trial version of WinRoute before

purchasing a license.

Notes:

1. However, supported external antiviruses as well as versions and license policy of in-

dividual programs may change as the time ﬂows. For up-to-date information please

refer to (

http://www.kerio.com/kwf).

2. External McAfee Anti-Virus programs are not supported by WinRoute.

11.1 Conditions and limitations of antivirus scan

Antivirus check of objects transferred by a particular protocol can be applied only to

traﬃc where a corresponding protocol inspector which supports the antivirus is used