Match web traffic that originates from the specified IP addresses.
Destination IP addresses
Match web traffic going to the specified IP addresses.
| Protect | 143
Figure 154: Add Exception
4. Specify an action to skip when the firewall encounters traffic that matches the criteria.
HTTPS Decryption
Do not decrypt HTTPS for traffic that meets the specified criteria.
Note: If you disable HTTPS decryption, the firewall will not perform any other check that relies on decrypted traffic, such as malware scanning or micro-app detection.
However, the firewall will continue to scan HTTP traffic that matches the exception.
Malware Scanning
Do not scan traffic that meets the specified criteria for malware.
Sandstorm
Do not send files that are downloaded using the specified criteria to Sandstorm for analysis.
Policy Checks
Do not check policies for traffic that meets the specified criteria.
Protection
The firewall provides several methods for protecting against threats and inappropriate web usage. Use these settings to configure how the firewall scans content for malware and to enable other protection features.
Malware Scanning
Configure general restrictions for scanning and restricting traffic by type and protocol.
Scan Engine Selection
Specify the type of scanning to apply.
Note: If you are using Sandstorm, set the single-scan engine to Sophos or select dualengine scanning.
Available Options:
Single Engine: Scan traffic using the primary anti-virus engine (by default, Sophos). This selection offers optimal performance.Dual Engine: Scan traffic using both engines, first by the primary and then by the secondary. Using this setting increases security, but may affect performance.
Malware Scan Mode
Specify batch or real-time scanning for HTTP/HTTPS traffic.
In batch mode, virus scanning will start only after the entire file has been downloaded. While this mode offers maximum protection, it may result in slower performance. Switch to real-time scanning to improve performance.
Content that could not be scanned
Specify an action to take when the firewall encounters content that could not be scanned.
Note: Files that cannot be fully scanned because they are encrypted or corrupted may contain undetected threats. Blocking offers the best protection.
Do not scan files larger than
Specify the maximum size of files to be scanned for HTTP(S), in MB. Files that exceed this setting will not be scanned.
Acceptable range: 1 to 256 MB
Default: 1 MB
Note: If you are using Sandstorm, this value has been reset to the recommended minimum value.
Maximum file scan size for FTP
Specify the maximum size of files to be scanned for FTP, in MB. Files that exceed this setting will not be scanned.
Acceptable range: 1 to 204 MB
Default: 1 MB
Scan audio and video files
Scan audio and video content for malware and threats. Scanning may cause issues with streaming audio and video.
Enable pharming protection
Pharming attacks redirect users from legitimate websites to fraudulent websites that have been created to look like the legitimate site.
Protect users against pharming and other domain name poisoning attacks by repeating DNS lookups before connecting.
Search Engine Enforcement
Enforce SafeSearch
Block websites that contain sexually explicit content from Google, Yahoo, and Bing search results.
| Protect | 144
