This section answers the common questions about the antivirus function.
Yes.
The update of the antivirus signature database require a license. Users can use the update of the antivirus signature database only after obtaining related licenses.
After the license expires, users cannot obtain the latest antivirus signature database.
In antivirus quick scanning mode, only PE files are detected by default. In full-text scanning mode, files except HTML, JS, PNG, TIF, WMF, BMP, GIF, JPEG, TXT, ISO, Unknown, and DAT files are detected by default. To check all types of files, you can run the av-detect all-file-type enable command to enable antivirus detection on all types of files.
In V600R007C20SPC602 and later versions, the full-text scanning mode does not detect Unknown and DAT files by default.
Yes. The antivirus function can detect 7ZIP, RAR, TAR, ZIP, and GZIP files. The maximum number of compression layers is configurable and ranges from 1 to 8. The default value is 3. For details, see Configuring File Decompression.
The antivirus function on the FW and the antivirus software on a PC are mutually complementary. Because they are deployed at different locations and have different antivirus signature databases, using both of them provides a hierarchical antivirus mechanism, which greatly secures the PC and the intranet.