Configuring virus checking

Configuring Virus Scanning Engines

The virus checking feature of GFI MailSecurity scans all SMTP traffic, inbound and outbound emails, for viruses using multiple Virus Scanning Engines. When GFI MailSecurity is installed on the Microsoft Exchange server machine, you can also configure GFI MailSecurity to scan the information store for viruses. GFI MailSecurity ships with both Norman and BitDefender Virus Scanning Engine as standard. However, you can optionally license the Kaspersky and McAfee Virus Scanning Engines which are supported as well. All of the mentioned anti-virus packages are proven and reliable virus detection engines, which have received many awards and certifications, including the industry leading certifications of ICSA.

Screenshot 31 - Virus Scanning Engines status page

You can view the operational and license status of each Virus Scanning Engine along with the execution sequence of the installed Virus Scanning Engines by clicking on the Virus Scanning Engines node under the Console Root.

The Virus Scanning Engines are listed in the same order of priority used by GFI MailSecurity to scan emails for viruses (Priority 0 being the highest or top priority).

Each Virus Scanning Engine must be configured separately. To configure virus checking, click on the required Virus Scanning Engine from the Status page on display in the right window. Alternatively, you can expand the Virus Scanning Engines node and click on the required Virus Sscanning Engine (e.g., Kaspersky).

NOTE: If you are running GFI MailSecurity on a Microsoft Exchange machine and the Information Store Scanning status is set to Disabled for all Virus Scanning Engines, the Information Store Scanning feature is disabled. The GFI MailSecurity configuration will inform you with a dialog that the Information Store Scanning feature is going to be disabled since you are trying to disable the only Virus Scanning Engine left which is set to scan the Information Store. If you click the OK button the particular Virus Scanning Engine Information Store Scanning feature will be disabled and so will the overall Information Store Scanning feature. If you click the Cancel button, the Virus Scanning Engine Information Store Scanning feature will not be disabled and the overall Information Store Scanning feature will remain active since there is at least one virus scanning engine which is still configured to scan the Information Store.

Screenshot 32 - Information Store Scanning will be disabled.

If the overall Information Store Scanning feature is disabled, you need to enable it from the Information Store Protection node before you can configure any Virus Scanning Engine to scan the Information Store. If you try to configure a Virus Scanning Engine to scan the Information Store and the feature is disabled from the Information Store Protection node, the GFI MailSecurity configuration will inform you about this with a dialog as shown in the screenshot below.

Screenshot 33 - Enable Information Store protection before configuring a Virus Scanning Engine