5 Appendix: SAV Dynamic Interface Performance. Sophos SAV Dynamic Interface
Below you will find brief information for SAV Dynamic Interface. This document provides comprehensive details on the SAV Dynamic Interface (SAVDI), a daemon or service that offers a networked interface to the Sophos Anti-Virus Interface (SAVI) and its virus engine. It enables clients using ICAP, SSSP, or Sophie protocols to scan files and data for malware, featuring robust Denial of Service protection, smooth virus data updates, and flexible communication options.
Advertisement
Advertisement
Advertisement
Key features
Provides a networked interface to virus engine
Supports ICAP, SSSP, and Sophie protocols
Enables malware scanning for files and data
Includes Denial of Service (DoS) protection features
Allows smooth updates to virus data
Communicates via TCP ports, Unix domain sockets, and Windows named pipes
Pre-allocates SAVI objects for minimized session startup time
Supports configurable logging mechanisms and multiple languages
Offers granular control for scanning permissions
Handles graceful and ungraceful exit modes
Frequently asked questions
SAVDI clients can use the ICAP, SSSP, or Sophie protocols for communication and scanning.
SAVDI limits the effect of DoS attacks through configurable time limits on scans and requests, timeouts on data transfer, idle timers, rejection of unidentified protocol requests, and restrictions on remote connections.
On *nix systems, the daemon can be signaled with a HUP signal to cause it to reload the virus data and the SAVI library, which includes the engine.
If a client disconnects during a scan, the scan will be aborted by SAVDI.