Administrator's Guide - Kerio Software Archive

Antivirus control
The If an attachment cannot be scanned section defines actions to be taken if one or multiple
files attached to a message cannot be scanned for any reason (e.g. password-protected
archives, damaged files, etc.):
• Reject the attachment — Kerio Control reacts in the same way as when a virus was
detected (including all the actions described above).
• Allow delivery of the attachment — Kerio Control behaves as if password-protected or
damaged files were not infected.
Generally, this option is not secure. However, it can be helpful for example when users
attempt to transmit big volume of compressed password-protected files (typically
password-protected archives) and the antivirus is installed on the workstations.
14.5 Scanning of files transferred via Clientless SSL-VPN (Windows)
If Kerio Control is installed on Windows, the antivirus check is performed also for transfers
of files between the local network and a remote client via Clientless SSL-VPN (see chapter 24).
The SSL-VPN Scanningtab allows to set advanced parameters for scanning of files transferred
via this interface. For the Kerio Control Software Appliance / VMware Virtual Appliance
administration, the SSL-VPN Scanning tab is not available.
Figure 14.10
Settings for scanning of files transferred via Clientless SSL-VPN
Transfer directions
Use the top section of the SSL-VPN Scanning tab to set to which transfer direction the
antivirus check will be applied. By default, only files downloaded from a remote client to
a local host are scanned to avoid slowdown (local network is treated as trustworthy).
202