Check Settings

The following options allow to configure the check of archives, specify the program actions for different types of malware and enable the use of quarantine (Table 4).

Option

Description

Engine: Check archives (0, 1)

This option enables/disables the scanning of archives. Two values are possible:

•	0 to disable scanning of archives

•	1 to enable scanning of archives

For correct archive check the value of this parameter must correspond to the scanning rules for archive scanning in Kerio WinRoute Firewall/Kerio Control.

Engine: Detect adware (0, 1)

Engine: Detect dialers (0, 1)

Engine: Detect hacktools (0, 1)

Engine: Detect jokes (0, 1)

Engine: Detect riskware (0, 1)

These options allow to enable/disable the detection of adware, dialers, hacktools, jokes and riskware in web traffic. Each parameter may have one of the following values:

•	0 to disable detection of corresponding malware type. Therefore, the objects containing such malware will be ignored.

•	1 to enable detection of corresponding malware type. In this case, the transmission of the objects with such type of malware will be denied. By default, this value is set for all options in this group.

Engine: Enable heuristic (0, 1)

This option enables/disables the heuristic analyzer that allows to detect the unknown viruses. Two values are possible:

•	0 to disable the heuristic analyzer

•	1 to enable the heuristic analyzer

By default, the heuristic analyzer is enabled.

Quarantine: Enabled (0, 1)

This option allows to enable/disable moving the infected objects to quarantine. By default, it is enabled.

Engine: Max archive level

This option specifies the maximum level of embedding in archives. If the number of embedding levels of a scanned object is bigger that the specified one, the object will be treated as if the check failed according to the corresponding settings of Kerio firewall.

The default value is 16.

Engine: Max archive size (KB)

This option defined the maximum file size (in kilobytes) of an archive. If the size of an archive exceeds the specified value, the object will be treated as if the check failed according to the corresponding settings of Kerio firewall.

The default value is 0 KB (corresponds to the unlimited file size).

Engine: Max scan time (ms)

This parameter defines the maximum time (in milliseconds) for object check. The time of an object check exceeds the specified one, the object will be treated as if the check failed according to the corresponding settings of Kerio firewall.

The default value is 0 ms (corresponds to the unlimited check time).

Option

Description

Logging: Log level (0, 1)

By setting this option you can turn on/off plug-in logging. By default, logging is turned off. Two values are acceptable:

•	1 to turn on logging

•	0 to turn off logging

To apply changes of this setting you need to reconfigure Kerio firewall to use the anti-virus Dr.Web for Kerio WinRoute.

Logging: Max file size (KB)

This setting allows to specify the maximum file size (in kilobytes) for the log text file. The default value is 50000 KB.