H3C Technologies H3C SecBlade IPS Cards - Manual (Page 148)

16-1
16
Anti-Virus Configuration
Anti-Virus Overview
You can configure anti-virus policies on a device and then apply them so that the device can identify
traffic with viruses and take actions accordingly, preventing viruses from infecting the network.
Configuring Anti-Virus
Configuration Task List
Perform the tasks in Table 16-1 to configure anti-virus policies.
Table 16-1 Anti-virus configuration task list
Task Remarks
Creating an
Anti-Virus
Policy
Required
Create an anti-virus policy and copy the rules of an existing policy to the new policy.
By default, there is an anti-virus policy named Anti-Virus Policy, which can be modified,
copied, and applied, but cannot be deleted.
Configuring
Rules for the
Policy
Optional
Modify the copied rules. You can enable/disable the rules and change their action sets.
By default, there are rules in the default anti-virus policy Anti-Virus Policy, which can be
modified but cannot be deleted. You can view the contents of the rules on the anti-virus list
page.
Applying the
Policy to a
Segment
Required
Apply the policy to a segment or certain IP addresses on the segment.
Before this step, you need to configure the segments in the page you enter by selecting
System Management > Network Management > Segment Configuration. For details,
refer to Network Management Configuration.
Activating
Configurations
Required
Activate all Class B configurations, including the configured policies, rules, and policy
applications.
z There are two categories of configurations in the system: Class A and Class B. Class A
configurations take effect immediately, while Class B configurations must be activated to
take effect.
z The Activate button is present on all pages with Class B configurations. Clicking the
button on any page will activate all Class B configurations. You are recommended to
complete all Class B configurations before clicking the Activate button.
Querying
Viruses Optional
View all viruses that the device can identify.