Get to know the Untangle NG Firewall Virus Blocker

The Untangle NG Firewall Complete packs an anti-virus from Comm-Touch that scans inbound traffic (web, email, and FTP) for viruses and malware. Unlike most other vendors gateway anti-virus solutions who limit the file sized that are scanned, Untangle firewall will scan any size file that passes through it.

The Untangle virus blocker lives in the rack interface like most of the other modules in the system.  Clicking the settings button on the left of the interface will get you access to the particulars of the virus blocker module.
Untangle NG Firewall Virus Blocker

Once inside the virus blocker, you’ll land in the web filter portion of the settings. The check box at the top enables the virus blocker scanning of web traffic.
Untangle Firewall Virus Blocker

The file extensions button brings up the file extension type settings. These settings allow you to specify which file types the virus blocker scans from inbound web traffic.
Untangle NG Firewall Virus Blocker

The MIME type’s button brings up the MIME type settings where you can edit the MIME types the virus blocker will scan.
Untangle Firewall Virus Blocker

The email settings in the Untangle virus blocker allow you to change the way the virus blocker scans email for viruses. The settings are remove infection, which strips the infected file from the email, block message which blocks the entire message and drops it. The other setting is pass message, which passes the message with the infection intact. Obviously, this is not recommended.
Untangle Firewall Virus Blocker

The FTP settings in the Untangle Firewall virus blocker are really very complicated. This subject matter may be a little over the average users head, so don’t feel bad if you’re overwhelmed at first glance.
Untangle NG Firewall Virus Blocker

Yeah, it’s a checkbox. On or off, that’s the only setting you get.

Next up is the pass sites settings. You can use these settings to specify domains that you don’t want the virus blocker scanning files from. The default settings are to pass windows updates and such. Use these pass settings to bypass files from scanning only if you explicitly trust the domain.
Untangle NG Firewall Virus Blocker

Last up are the Untangle NG Firewall virus blocker event viewers. You can use the event viewers to troubleshoot any problems you might have receiving files and such.
Untangle Firewall Virus Blocker Event Viewer

That’s the Untangle virus blocker in all its glory. It’s arguably the easiest to setup and deploy gateway anti-virus on the market. The fact that Untangle will scan all files is a boon to its effectiveness.

By – Jim Martin