4.7	Virus scanner actions

Screenshot 45 - Virus Scanning Engine: Configuration page (Actions Tab)

In GFI MailSecurity, you can configure what each of the installed Virus Scanning Engines should do whenever an infected email is detected. To configure the actions of a virus scanner:

1. Select the virus scanner that you want to configure and click the Actions tab.

2. Choose one of the following options:

•	Quarantine item - Select this option if you want to quarantine all virus-infected emails detected by this Virus Scanning Engine. You can subsequently review (approve/delete) all the quarantined emails.

•	Delete item - Select this option to delete all virus-infected emails detected by this Virus Scanning Engine.

NOTE: This option overrides the settings configured in the General tab. i.e. If in the General tab, you selected Block all emails containing a macro (i.e. quarantine all emails even the ones having a genuine macro) but at the same time you have enabled the Delete item option, ALL emails containing a macro will be deleted.

3. To send email notifications whenever an infected email is detected, enable any of the following options:

•	Notify local user - Select this option if you want to notify the email local users when this filter detects a virus.

NOTE: If a threat is detected in an outbound email, the recipients will receive the original email with the malicious parts removed. A security notice is attached to the email to inform the recipients what email parts were removed and for what reason. This behavior is always enabled and is not affected by this setting.

•	Notify administrator - Select this option if you want to notify the administrator whenever this virus scanner detects an infected email.

4. Select the Log occurrence to this file check box and specify a log file name in the box below, if you want to log the virus scanning activity to a log file. You can specify either the file name only or else the full path to a custom location on disk.