Skip to main content
Versa Networks

Configure SD-WAN Malware Protection Profiles

  1. Last updated
  2. Save as PDF

Versa-logo-release-icon.pngFor supported software information, click here.

Malware is malicious software that is specifically designed to disrupt computers and computer systems. There are many types of malware, including computer viruses, worms, Trojan viruses, spyware, adware, and ransomware. Among the things malware can do is leak private information, gain unauthorized access to information or systems, and deprive users of access to information.

You can configure malware protection profiles to detect and prevent malware threats. You then associate the policies with access control security policies. For more information, see Configure SD-WAN Access Control Policies.

Configure a Malware Protection Profile

  1. In Tenant view, select Configure > Secure SD-WAN > Security > Profiles.

    security-profiles-1.png
  2. Select the Malware Protection tab. 
    • If you have not yet configured a malware protection profile, click Add Malware Protection Profile. 
    • If you have configured one or more malware profiles, the following screen displays. Click the + Add icon. 

      malware-protection-prof.png

      The Add Malware Protection Profile workflow displays.

      malware-protect-flow.png
  3. In step 1, File Type and Protocols, select the direction of the traffic on which to perform the malware scan.
    1. Select the protocols to scan for malware. You can use the search box to find specific protocol types, or check the Select All box to select all protocol types.

      malware-file-types.png
    2. Select the types of files to scan for malware. You can use the search box to find specific file types, or check the Select All box to select all file types.
  4. Click Next or click step 2, Enforcement.
  5. Select the action to enforce when traffic matches the protocols, file types, and traffic direction you selected in step 1, File Types and Protocol:
    • Alert—Allow the file to pass and log the action.
    • Allow—Allow the file to pass without logging the action.
    • Deny—Do not allow the file to pass and log the action. This is the default.
    • Recommended Action—FTP and HTTP traffic is set to Deny. Email traffic (SMTP, IMAP, POP3, and MAPI) is set to Alert.
    • Reject—Reset the connection to the server and client, and log the action.

      enforcement-malware.png
  6. Click Next or click step 3, Permissions. 
  7. The permission for each role is selected by default, and you can update it. To change permissions for a role, select or deselect the Create, Read, Update, and Delete fields for the role.

    permissions.png
  8. Click Next or click step 4, Review and Submit.
  9. In the General section, enter a name for the malware protection profile. You can also enter a text description for the profile and one or more tags. A tag is an alphanumeric text descriptor with no spaces or special characters. 

    review-submit-enable-logging.png
     
  10. To enable logging, click the Enable Logging toggle, and then select a logging profile that indicates where to forward the logs. 
    • Use Default—Click to use the default logging profile.
    • Custom—Click to use a custom logging profile, and then select a profile in the drop-down list. To create a custom profile, select + Create New.

      logging-enabled.png
  11. For all other sections, review the information. To make changes, click the pencil-icon-blue-on-white.png Edit icon. 
  12. Click Submit to create the malware protection profile.

Supported Software Information

Releases 13.1.1 and later support all content described in this article.