Real-time scanning
Norman SandBox
Exclude list
Protocols scanned for computer viruses
Automatic updates

Real-time scanning
Back to top

Norman Virus Control for Checkpoint FireWall-1NG with Application Intelligence offers on-access scanning for computer viruses at the company’s firewall, thus ensuring the best network perimeter protection against computer viruses available. If a computer virus is detected, the following options are available:

• Clean

• Remove

• Warn only

• Ignore

Infected files that cannot be cleaned will be moved into a quarantine area.

Norman SandBox
Back to top

Norman’s SandBox technology detects new and unknown computer viruses, including trojans and worms. Today, an email worm can infect tens of thousands of workstations in a matter of seconds. The antivirus vendors are expected to find the cure, update the virus definition files, and distribute these to its customers immediately. The need for speed is paramount. Norman’s SandBox is a virtual world where everything is simulated. An emulator provides an environment where possible virus infected executables «run» just as they would do on a real system. When execution stops, the SandBox is analyzed for changes. The SandBox is particularly tuned to find new email-, network- and peer-topeer worms.
 

Exclude list
Back to top

The exclude list is a list of file type extensions. The file extension is meant to tell the operating system what kind of file it is. Normally all types of files are scanned by the virus scanner. When virus scanning is performed on the FireWall-1 NG with Application Intelligence , the slight delay imposed by the virus scanner on each file passing through the firewall may add up to significantly slowing down the access through the firewall. The users may experience slow Internet access when all files are scanned. To improve the throughput, some file types may be excluded from virus scan, typically files with static content and without executable programs or scripts.
 

Protocols scanned for computer viruses
Back to top

The Norman Virus Control for Checkpoint FireWall-1NG with Application Intelligence plug-in protects all traffic that comes into the network over the HTTP, SMTP, or FTP using the CVP protocol. The various protocols can be configured individually, and protocols can be excluded from being scanned if required.
 

Automatic updates
Back to top

Norman Internet Update (NIU) is an integrated part of NVC and can be configured to regularly check for new and updated files on Norman’s product servers. NIU provides complete updating and upgrading of the application software and virus definition files to ensure that the latest version of the software is always installed.
NIU employs incremental updates of virus definition files to keep the size of the updates as small as possible, thereby reducing download time.