http-detect

Function

The http-detect command enables AV scanning for the files transmitted using HTTP.

The undo http-detect command disables AV scanning for the files transmitted using HTTP.

Format

http-detect direction { both | download | upload } [ action { alert | block } ]

undo http-detect [ direction ] [ action ]

Parameters

Parameter	Description	Value
direction { both \| download \| upload }	Specifies the transmission direction of the files requiring AV scanning.	The direction can be one of the following: both: The system detects viruses on both uploaded and downloaded files. download: The system detects viruses on downloaded files. upload: The system detects viruses on uploaded files.
action { alert \| block }	Specifies the response action.	The response action can be either of the following (the default action is block): alert: The system permits files and generates logs. block: The system terminates sessions and generates logs.

Views

Antivirus profile view

Default Level

2: Configuration level

Usage Guidelines

By default, the system scans viruses on files both uploaded and downloaded using HTTP.

If no response action is specified during the initial configuration, the default action block takes effect. If no response action is specified during configuration modification, the action configured last time will be used.

The client/server type of protocols supported by the AV function also applies to the direction.

Upload: The file is sent from a client to a server.
Download: The file is sent from a server to a client.

Connections are generally initiated by a client. To ensure that connections can be established and the AV process can be implemented successfully, configure the zone of the client as the source and that of the server as the destination when you configure the security policy.

Example

# Create profile av_http, configure AV scanning on files uploaded using HTTP, and set the response action to block.

<sysname> system-view
[sysname] profile type av name av_http
[sysname-profile-av-av_http] http-detect direction upload action block