Configure Offline Custom Malware Protection Profiles

For supported software information, click here.

Offline malware is malicious software that is specifically designed to disrupt computers and computer systems. There are many types of malware, including computer viruses, worms, Trojan viruses, spyware, adware, and ransomware. Among the things malware can do is leak private information, gain unauthorized access to information or systems, and deprive users of access to information.

By default, Versa SASE provides a predefined security enforcement policy to protect against malware. This article describes how you can configure custom malware protection profiles.

To configure a custom offline malware-filtering profile:

1. Go to Configure > API Based Data Protection > Profiles.
   
   
   
   The following screen displays.
   
   
2. Select the Secure Web Gateway (SWG) tab, and then select the Malware Protection subtab.
3. Click + Add to add a new offline malware-filtering profile. The API Based Data Protection-Profiles screen displays.
   
   
4. Select the protocols to scan for offline malware:
   • FTP
   • HTTP
   • IMAP
   • MAPI
   • POP3
   • SMTP
5. Select the types of files to scan for offline malware. Use the search box to find specific file types. Check the Select All box to select all file types.
6. Scroll to the bottom of the screen, and then select the direction of the traffic on which to perform the malware scan. By default, the Download and Upload option.
   
   
7. Click Next to go to the Action screen.
   
   
8. Select the enforcement action to take when traffic matches the offline malware profile:
   • Alert
   • Allow
   • Deny (default)
   • Recommended Action
   • Reject
     
     Note that if traffic matches both the Allow and Deny actions, the Deny action takes precedence over the Allow action.
9. Click Next.
10. In the Review and Submit screen, enter a name for the offline malware protection profile and, optionally, a description and one or more tags. A tag is an alphanumeric descriptor, with no white spaces or special characters, that you can use to search the objects.
    
    
    
11. Click the Enable Logging slider to send logs to Versa Analytics.
12. Review the remaining entries. To make changes, click the Edit icon.
13. Click Save to add the malware protection profile.