Table of Contents
Click an item to jump directly to that question.
- Virus Blocker Log Says File Is Blocked, But I Can Still Download It
- Why Do Emails With Larger Attachments Sometimes "Disappear"?
- If I Have Both Virus Blocker And Lite, Are Both Used And What Order?
- If I Use Virus Blocker, Do I Need Antivirus On Individual Computers?
- How Does Virus Blocker Compare To "Brand-Name" Virus Blockers?
When downloading over the web small files are blocked with a block page. Larger files are treated differently. They are fed to the client at a slower rate than they are actually downloaded so the client does not time out while the download happens. After NG Firewall scans the complete file it will either refuse to send the rest if there is a virus or immediately send the rest. This means for large files the Event Log says the file is "blocked", but checking the file size on the client will show that you do not actually have the complete file.
While Untangle is scanning the attachments your email server is still waiting for the message, most likely triggering a timeout setting. If you're using MS Exchange, you'll want to increase the Connection Inactivity Timeout setting.
If you have both virus scanners installed, Virus Blocker is applied to a message first: if a message passes Virus Blocker, then and only then is Virus Blocker Lite applied to the message (there's no point in scanning the message twice if the first scanner has rejected it). This is not to say one scanner is inherently better than the other: note that Virus Blocker is complemented by Virus Blocker Lite and in the case of a virus-free message, the computational overhead of the virus scan includes both scanners. A message that would be rejected by both scanners incurs the computational and time cost of just Virus Blocker. To perform a valid comparison, you should run test messages through the NG Firewall with no scanners installed, Virus Blocker by itself, Virus Blocker Lite by itself and lastly both scanners installed together and compare the results.
With your NG Firewall's Virus Blocker(s) active, they will scan inbound and outbound HTTP, FTP and Email traffic as it passes through the Untangle. This is your first layer of protection. Imagine this scenario:Angela is a Resume Writer at Angelic Resumes, Inc. One day she works from a remote location, and downloads an infected file from the Internet to her personal laptop, then to her USB drive. She returns to the office the next day, and, using the USB drive, saves the infected file directly to her desktop computer. Her desktop computer is now infected with a virus. To make matters worse, she emails that file to her coworkers. Her coworkers download the file, and now their desktops are also infected.
In this scenario the file was transfered without going through Untangle. If Angela had emailed the file to her coworkers work email accounts from her personal email account, that email would have passed through the NG Firewall, which would prevent the virus from entering your protected network. Because of situations like this, we always recommend an additional layer of protection on the desktop.