Difference between revisions of "Defend Against Malware And External Attacks"
m (1 revision imported) |
|||
| Line 12: | Line 12: | ||
== Prerequisite == | == Prerequisite == | ||
<span style="font-family:lucida sans unicode,lucida grande,sans-serif">To scan the viruses for HTTPS websites HTTPS Inspection should be enabled in SafeSquid. Check the document to configure HTTPS inspection '''- [ | <span style="font-family:lucida sans unicode,lucida grande,sans-serif">To scan the viruses for HTTPS websites HTTPS Inspection should be enabled in SafeSquid. Check the document to configure HTTPS inspection '''- [https://docs.safesquid.com/index.php/Configure_HTTPS_Inspection How to enable HTTPS Inspection]'''</span> | ||
== SvScan == | == SvScan == | ||
| Line 20: | Line 20: | ||
<span style="font-family:lucida sans unicode,lucida grande,sans-serif">SvScan is used for scanning both HTTP and </span><span class="f_dw_text">HTTPS traffic.</span> | <span style="font-family:lucida sans unicode,lucida grande,sans-serif">SvScan is used for scanning both HTTP and </span><span class="f_dw_text">HTTPS traffic.</span> | ||
<span style="font-family:lucida sans unicode,lucida grande,sans-serif">Read more about</span> [ | <span style="font-family:lucida sans unicode,lucida grande,sans-serif">Read more about</span> [https://docs.safesquid.com/index.php/SvScan SvScan] | ||
== ClamAV <span class="mw-headline" id="Clam_antivirus">antivirus</span> == | == ClamAV <span class="mw-headline" id="Clam_antivirus">antivirus</span> == | ||
| Line 26: | Line 26: | ||
<span style="font-family:lucida sans unicode,lucida grande,sans-serif">ClamAV antivirus is extra layer of security beside SvScan which protects you from viruses. ClamAV is an open source antivirus engine that is built to detect viruses, trojans, malware and other threats. It supports multiple file formats (documents, executables or archives), utilizes multi-thread scanner features.</span> <span style="font-family:lucida sans unicode,lucida grande,sans-serif">With this antivirus feature you can detect and block files containing viruses known to the ClamAV daemon scanner. You can integrate your own ClamAV server with SafeSquid here.</span> | <span style="font-family:lucida sans unicode,lucida grande,sans-serif">ClamAV antivirus is extra layer of security beside SvScan which protects you from viruses. ClamAV is an open source antivirus engine that is built to detect viruses, trojans, malware and other threats. It supports multiple file formats (documents, executables or archives), utilizes multi-thread scanner features.</span> <span style="font-family:lucida sans unicode,lucida grande,sans-serif">With this antivirus feature you can detect and block files containing viruses known to the ClamAV daemon scanner. You can integrate your own ClamAV server with SafeSquid here.</span> | ||
<span style="font-family:lucida sans unicode,lucida grande,sans-serif">Read more about</span> [ | <span style="font-family:lucida sans unicode,lucida grande,sans-serif">Read more about</span> [https://docs.safesquid.com/index.php/Clam_antivirus clamAV] | ||
== ICAP antivirus == | == ICAP antivirus == | ||
| Line 58: | Line 58: | ||
<span style="font-family:lucida sans unicode,lucida grande,sans-serif">Trend Micro InterScan Web Security Suite stops Internet threats when they try to enter your network. This software suite provides a complete solution that blocks spyware and malware attacks at the Internet gateway. It also prevents access to known malicious web sites and provides an option to clean infected end-user PCs.</span> | <span style="font-family:lucida sans unicode,lucida grande,sans-serif">Trend Micro InterScan Web Security Suite stops Internet threats when they try to enter your network. This software suite provides a complete solution that blocks spyware and malware attacks at the Internet gateway. It also prevents access to known malicious web sites and provides an option to clean infected end-user PCs.</span> | ||
<span style="font-family:lucida sans unicode,lucida grande,sans-serif">Read more about</span> [ | <span style="font-family:lucida sans unicode,lucida grande,sans-serif">Read more about</span> [https://docs.safesquid.com/index.php/ICAP ICAP] | ||
{{Seo|keywords=secure web gateway,secure network,secure network from malware attacks,anti virus,malicious attacks,virus scanner|description=Secure your network from Malware And External Attacks using Secure Web Gateway}} | {{Seo|keywords=secure web gateway,secure network,secure network from malware attacks,anti virus,malicious attacks,virus scanner|description=Secure your network from Malware And External Attacks using Secure Web Gateway}} | ||
[[Category:How To]] | [[Category:How To]] | ||
Latest revision as of 13:05, 15 June 2022
Overview
In this world of ubiquitous computers and persistent threats from hackers, protecting your computer is a must. The key pathway through which malware attacks the system is the Internet and its popular service, the Web.
There are numerous ways to protect and remove malware from our computers. Not a single method is enough to ensure your computer is secure. The more layers of defense, the harder for hackers to hack your computer. SafeSquid provides you three different features/sections to protect your computer from various antivirus -
- SvScan Antivirus
- ClamAV Antivirus
- ICAP Antivirus
Prerequisite
To scan the viruses for HTTPS websites HTTPS Inspection should be enabled in SafeSquid. Check the document to configure HTTPS inspection - How to enable HTTPS Inspection
SvScan
SvScan is a built in module in SafeSquid that protects the users against viruses, Trojans, malware and other threats.
SvScan is used for scanning both HTTP and HTTPS traffic.
Read more about SvScan
ClamAV antivirus
ClamAV antivirus is extra layer of security beside SvScan which protects you from viruses. ClamAV is an open source antivirus engine that is built to detect viruses, trojans, malware and other threats. It supports multiple file formats (documents, executables or archives), utilizes multi-thread scanner features. With this antivirus feature you can detect and block files containing viruses known to the ClamAV daemon scanner. You can integrate your own ClamAV server with SafeSquid here.
Read more about clamAV
ICAP antivirus
ICAP antivirus perform virus scanning, content modification and blocking inappropriate content. You can integrate different types of ICAP servers with SafeSquid.
Here you can integrate the SafeSquid with any ICAP (Internet Content Adaptation Protocol) based network services like-
Dr. Web’s ICAP based antivirus
In this scheme, a client interacts with an HTTP server through a proxy server. The proxy server is a client of the ICAP server (Dr. Web ICAP).
Dr. Web ICAP module is a client of Dr. Web Daemon. Dr. Web ICAP allows to perform virus scanning (using Dr. Web Daemon) of all HTTP traffic coming from the HTTP server and transmitted by the proxy server via the ICAP protocol. The given scheme does not allow FTP traffic scanning.
Note that HTTPS traffic is not scanned as it is encrypted and cannot be decrypted without the public key of the HTTPS server.
Kaspersky Antivirus for Proxy Server
Kaspersky Antivirus provides basic protection for your computer. Kaspersky delivers essential protection that helps defend your PC against the latest viruses, ransomware & more.
In includes antivirus file, software and website scan, anti-phishing, protection against ransomware, control over internet traffic, vulnerability search, etc.
Symantec Scan Engine
Symantec Endpoint Protection is a security software suite that includes intrusion prevention, firewall, and anti-malware features. Symantec Scan Engine is a TCP/IP server and programming interface that enables third parties to incorporate support for Symantec content scanning technologies into their proprietary applications.
Trend Micro IWSS
Trend Micro InterScan Web Security Suite stops Internet threats when they try to enter your network. This software suite provides a complete solution that blocks spyware and malware attacks at the Internet gateway. It also prevents access to known malicious web sites and provides an option to clean infected end-user PCs.
Read more about ICAP