Skip to main content
Versa Networks

Configure Custom Malware Protection Profiles

  1. Last updated
  2. Save as PDF

Versa-logo-release-icon.pngFor supported software information, click here.

Malware is malicious software that is specifically designed to disrupt computers and computer systems. There are many types of malware, including computer viruses, worms, Trojan viruses, spyware, adware, and ransomware. Among the things malware can do is leak private information, gain unauthorized access to information or systems, and deprive users of access to information.

By default, Versa SASE provides a predefined security enforcement policy to protect against malware. This article describes how you can configure custom malware protection profiles.

To configure a custom malware-filtering profile:

  1. Go to Configure > Security Service Edge > Real-Time Protection > Profiles.

    profiles-page.png

    The following screen displays.

    malware-protection-v2-border.png
     
  2. Select the Malware Protection and IPS tab, and then select the Malware Protection subtab.

    Note: In Release 12.2.2, the Malware Protection subtab was moved under the new Malware Protection & IPS tab.
     
  3. Click + Add to add a new malware-filtering profile. The Create Malware Protection Profile screen displays.

    create-malware-protection-profile-v3-full-border.png
     
  4. Select the protocols to scan for malware:
    • FTP
    • HTTP
    • IMAP
    • MAPI
    • POP3
    • SMB
    • SMTP
       
  5. Select the types of files to scan for malware. Use the search box to find specific file types. Check the Select All box to select all file types.
  6. Scroll to the bottom of the screen, and then select the direction of the traffic on which to perform the malware scan. By default, the Download and Upload option.

    create-malware-protection-profile-traffic-direction-border.png
  7. Click Next to go to the Action screen.

    create-malware-protection-profile-Action-v2-border.png
     
  8. Select the enforcement action to take when traffic matches the malware profile:
    • Alert
    • Allow
    • Deny (default)
    • Recommended Action
    • Reject

      Note: If traffic matches both the Allow and Deny actions, the Deny action takes precedence over the Allow action.
       
  9. Click Next.
  10. In the Review and Submit screen, enter a name for the malware protection profile and, optionally, a description and one or more tags. A tag is an alphanumeric descriptor, with no white spaces or special characters, that you can use to search the objects.

    create-malware-protection-profile-review-submit-v3-full-border.png
     
  11. Click the Enable Logging slider to send logs to Versa Analytics.
  12. Review the remaining entries. To make changes, click the edit-icon-blue-on-white.pngEdit icon.
  13. Click Save to add the malware protection profile.

Supported Software Information

Releases 11.3.1 and later support all content described in this article, except:

  • In Release 12.2.2, the Malware Protection subtab was moved under the new Malware Protection & IPS tab.