Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Winroute missing Viruses??
  •  
MI6 James Bond

Messages: 2
Karma: 0
Send a private message to this user
I have winroute 6.1.4 patch 2 and the latest NOD32 with plugin and it seems to work( it checks files etc) but when I go to the eicar test files the first eicar.com is found but the second and third (eicar.com.txt and eicar.com.zip ) aren't even checked. Is this normal and is there a way to let kerio check them?

Thanks in advance

PS eicar website (http://www.eicar.org/anti_virus_test_file.htm)
  •  
FRiC

Messages: 56
Karma: 0
Send a private message to this user
It probably depends on your virus scanner and not on KWF. I use avast plug-in and it lets me download/view eicar.com.txt, but not the other three.

Oh, but I'm using 6.2.0 beta 2.
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
You can the configure which files are scanned and which are not in the Administration Console.
  •  
giampos

Messages: 187
Karma: 2
Send a private message to this user
winkelman wrote on Wed, 15 February 2006 09:43

You can the configure which files are scanned and which are not in the Administration Console.


In the scanning rules, I've configured to scan both .exe, .txt and .zip, but the zip file isn't blocked and pass the firewall. The SSL downloaded files passes the firewall too !!
where is the mistake ?
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
giampos wrote on Mon, 20 February 2006 18:21

but the zip file isn't blocked and pass the firewall. The SSL downloaded files passes the firewall too !!
where is the mistake ?



Is your NOD32 configured properly to scan inside compressed files?

SSL streams are encrypted between webserver en pc client, so the 'in between' firewall cannot see what's going on and thus cannot scan anything.
  •  
giampos

Messages: 187
Karma: 2
Send a private message to this user
[quote title=winkelman wrote on Tue, 21 February 2006 11:43
1) Is your NOD32 configured properly to scan inside compressed files?

2) SSL streams are encrypted between webserver en pc client, so the 'in between' firewall cannot see what's going on and thus cannot scan anything.[/quote]


1) Yes it is, have configures both Amon and Nod32 module for compressed files!

2) So it mean that no AV software will be able to scan SSL Streams?

  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
giampos wrote on Tue, 21 February 2006 15:18

1) Yes it is, have configures both Amon and Nod32 module for compressed files!

Well, then I give up. Question: how can you have two scanners active in KWF?


giampos wrote on Tue, 21 February 2006 15:18

2) So it mean that no AV software will be able to scan SSL Streams?


True. The entire puprose of SSL is to prevent anyone/thing else to snoop into the 'conversation'. So either disallow the use of eny encrypted connections or accept that you cannot filter/scan/block/whatever secure connections.
Previous Topic: I can't browse the internet
Next Topic: Port forwarding changed??!?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Nov 22 10:32:47 CET 2017

Total time taken to generate the page: 0.00409 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.