AntiVirus Service on USG60W

JSH

I'm configuring an USG60W and the AntiVirus functionality doesn't work as needed. I'm running the firmware (4.60 AAKZ.1).

The documentation for the device, shows how to configure and test AntiVirus functionalitty on the USG60W with the EICAR test file.

Unfortunately, the documentation lists regular HTTP URLs alongside HTTPS URLs and make no differentiation. As of the writing of this post the EICAR website has disabled HTTP downloads.

Upon further investigation, I believe the problem is that the USG60W doesn't have the capability to perform SSL inspection, as listed here:

As listed here: https://www.zyxel.com/products_services/Unified-Security-Gateway-USG40-40W-60-60W/comparison

If that is the case, that means that all HTTPS, Email (IMAPS, SSMTP, POP3S), and anything else secured (e.g. FTPS) can't be inspected. This makes this paid-service very limited in value.

Can someone confirm this for me? 

jSH>

jasailafan

You may find the answer in this post.
https://businessforum.zyxel.com/discussion/comment/14524#Comment_14524

jasailafan

You may find the answer in this post.
https://businessforum.zyxel.com/discussion/comment/14524#Comment_14524

JSH

Thanks @jasailafan

That does answer my question.

Unfortunately, with 90% of the HTTP traffic being encrypted these days, it's not a very useful feature. I will have to see if I can change the model with another one.