Kaspersky AntiVirus

Axigen Documentation

In the "Licensing" section, you can "Enable" / "Disable" the KAV filter (at server level) via the related button.

This is the same action as enabling the Kaspersky-AV filter via the "Security & filtering" → "AntiVirus & AntiSpam" → "Supported Applications" tab.

Do not enable the Kaspersky Antivirus filter if the Kaspersky Antivirus service is not running. To start this service, go to "Services" → "Services Management".

In the "Configuration & Updates" section, you can set the working directory for KAV via the related text box.

Click on the "Configure" button under "Updates" in order to set the proxy server for retrieving the updates of the Kaspersky AntiVirus application. A new window will open, allowing you to specify the IP and port of the proxy server, as well as the login details (username and password) for authentication. To enable the "NTLM authorization on proxy server", check the corresponding option. Hit "Save Configuration" to save the changes. 

Use the "Update now" button to get the latest AV database updates. The "Update status" and "Last update on" provides you with information on the performed upgrades.

The "AntiVirus Scanning" section allows you to configure the general parameters relative to the scanning of email messages and attachments with Kaspersky. Set the maximum size of emails to be scanned, the maximum time to be spent on scanning an email message, whether scanning should be also performed on attached archives containing executable files and unpack nested archives up to a desired level.

You can also set the maximum number of emails queued for scanning and the number of threads that should be used to scan the en-queued messages.

The "Heuristic Scanning Level" will be imposed to the heuristic analyzer, an advanced technology employed by Kaspersky to detect viruses which are not yet described by existing anti-virus databases.

To set the "Heuristic Scanning Level", click on the slider and move it to the left or to the right. The selected level will be highlighted in blue. Please note that scan level values are cumulative (i.e. setting the level to "Medium" scanning will automatically include the "Shallow" level of scanning).

Also, the detail level chosen for the scanning process provides the balance between the thoroughness of the searches for new threats, the load on the operating system's resources and the duration of the scan. The higher the log level, the more system resources will be required and the longer it will take.

Available scan levels: the "Shallow" option is recommended for on-demand scanning, and not for file monitoring as it can significantly affect the system performance. The "Medium" option is also not recommended for file monitoring, for the same reason. The "Detail" option is recommended for POP3 monitoring, but can affect the system performance. For file monitoring, it is recommended to turn this option off.

Under "AntiVirus Actions", enable the "Attempt disinfection on infected email parts" option, then use the drop-down menus in order to select the actions to be taken when infected or suspicious emails are found, or when the scanning process fails. Available options include allowing the message to be delivered, discarding it, rejecting it or quarantining it.

Once your changes are complete, save them by clicking the "Save Configuration" button.