Fortinet black logo

Administration Guide

Antivirus parameters - Windows

Copy Link
Copy Doc ID dc02a854-ab11-11ea-8b7d-00505692583a:92023
Download PDF

Antivirus parameters - Windows

The table below provides an alphabetical list all of the possible parameters that can be configured for antivirus software for Windows. Only some of these parameters are used for any given antivirus program.

Note

Check with your vendor for the required format. Formats for dates, version numbers, .dat files, etc. change frequently and vary by product.

Note

Default parameter values are entered and updated automatically by the scheduled Auto-Def Updates. If the values have been manually edited, the Auto-Def Updates will not override those changes.

Settings

Parameter

Description

Typical options

AntiVirus definition Date

The date of the required AntiVirus definition files.

YYYY-MM-DD

AntiVirus Engine

The version number of the required AntiVirus Engine.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Client Security Antimalware Service must be running

Select a setting.

Enabled or
disabled

Client Security State Assessment Service must be running

Select a setting.

Enabled or
disabled

Custom Scans

Select the custom scans that you want to implement for the product.

Custom scans

Daily Virus Definition

The version of the required daily definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Definitions Label

Enter the label for the Definitions Web Address.

Text entry

Definitions Web Address

Enter the URL for the web page where the updated definitions for the selected product can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Definitions Version

The version of the required definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Engine Version

The number of the required engine version.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Engine Version Label

Enter the label for the Engine Version Web Address.

Text entry

Engine Version Web Address

Enter the URL for the web page where the updated engine version for the selected product can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Label

Enter a label. This label will appear on the Results panel to identify which scan the host failed.

Text entry

Macro Definition

The date of the required macro definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

YYYY-MM-DD

>

=

>=

Main Virus Definition

The version of the required main definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Minimum Engine Version

Minimum engine version required to pass the scan.

**

Operational Label

Enter a label. This label will appear on the Results panel to identify that an operational state did not meet the requirement.

Text entry

Operational Web Address

Enter the URL of the web page that displays information about the product when the host fails the scan because the Client Security State Assessment or Antimalware Service operational state did not meet the requirement.

URL

Operator (applies to all)

The Engine version and definition (Virus and Spyware) values found on the host must be either greater than, equal to, or both than the value(s) entered.

>

=

>=

Products to Detect

Select which products you wish to include in the scan. All products are selected by default.

Note

Scan results show the group name (label) only, not the specific AV/AS product. The scan will either pass or fail for the group (label).

Program Version

The version number of the program.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Program Version Label

Enter the label for the Program Version Web Address.

Text entry

Program Version Web Address

Enter the URL for the web page where the required version can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Prohibit this Product

Set this option to true if you want to prohibit the installation of this product. If this product is installed, the scan fails.

true or false

Protection Updates

The date of the required Protection Updates file.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

YYYYMMDD

>

=

>+

Protection Updates Label

Enter the label for the Protection Updates Web Address.

Text entry

Protection Updates Web Address

Enter the URL for the web page where the Production Updates can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Signature Version

The build number or date and build number of the required signature file.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Signature Version Label

Label for the Signature Version Web Address.

Text entry

Signature Version Web Address

Enter the URL for the web page where the required signature version can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Spyware Definition

Number of the required spyware definition file.

**

Version

The number of the required virus definition file.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Version Label

Enter the label for the Version Web Address.

Text entry

Version Web Address

Enter the URL for the web page where the required version can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Virus Definition

Used to identify the virus definition version installed. May be the name of the definition file, the date of the file, a version number,etc.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Virus Definition

VDF

Label

The label for the VDF web address.

Text entry

Virus Definition

VDF

Web Address

The URL for the web page where updated definitions can be located and downloaded. Supply a local or Internet URL. This URL will be displayed on the Failed Policy Results view if the host fails the scan.

URL

Virus Signature

The date of the required virus signature.

YYYY-MM-DD

Web Address

Enter the URL of the web page that displays information about the product if the host fails the scan.

URL

Windows Operating System

Select any or all Windows operating systems required for the selected product.

Software specific parameters

Eset-NOD32

Minimum Scanner Version (nod32.exe)

The number of the required scanner version of the file nod32.exe.

**

Antivirus parameters - Windows

The table below provides an alphabetical list all of the possible parameters that can be configured for antivirus software for Windows. Only some of these parameters are used for any given antivirus program.

Note

Check with your vendor for the required format. Formats for dates, version numbers, .dat files, etc. change frequently and vary by product.

Note

Default parameter values are entered and updated automatically by the scheduled Auto-Def Updates. If the values have been manually edited, the Auto-Def Updates will not override those changes.

Settings

Parameter

Description

Typical options

AntiVirus definition Date

The date of the required AntiVirus definition files.

YYYY-MM-DD

AntiVirus Engine

The version number of the required AntiVirus Engine.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Client Security Antimalware Service must be running

Select a setting.

Enabled or
disabled

Client Security State Assessment Service must be running

Select a setting.

Enabled or
disabled

Custom Scans

Select the custom scans that you want to implement for the product.

Custom scans

Daily Virus Definition

The version of the required daily definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Definitions Label

Enter the label for the Definitions Web Address.

Text entry

Definitions Web Address

Enter the URL for the web page where the updated definitions for the selected product can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Definitions Version

The version of the required definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Engine Version

The number of the required engine version.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Engine Version Label

Enter the label for the Engine Version Web Address.

Text entry

Engine Version Web Address

Enter the URL for the web page where the updated engine version for the selected product can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Label

Enter a label. This label will appear on the Results panel to identify which scan the host failed.

Text entry

Macro Definition

The date of the required macro definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

YYYY-MM-DD

>

=

>=

Main Virus Definition

The version of the required main definition files.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Minimum Engine Version

Minimum engine version required to pass the scan.

**

Operational Label

Enter a label. This label will appear on the Results panel to identify that an operational state did not meet the requirement.

Text entry

Operational Web Address

Enter the URL of the web page that displays information about the product when the host fails the scan because the Client Security State Assessment or Antimalware Service operational state did not meet the requirement.

URL

Operator (applies to all)

The Engine version and definition (Virus and Spyware) values found on the host must be either greater than, equal to, or both than the value(s) entered.

>

=

>=

Products to Detect

Select which products you wish to include in the scan. All products are selected by default.

Note

Scan results show the group name (label) only, not the specific AV/AS product. The scan will either pass or fail for the group (label).

Program Version

The version number of the program.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Program Version Label

Enter the label for the Program Version Web Address.

Text entry

Program Version Web Address

Enter the URL for the web page where the required version can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Prohibit this Product

Set this option to true if you want to prohibit the installation of this product. If this product is installed, the scan fails.

true or false

Protection Updates

The date of the required Protection Updates file.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

YYYYMMDD

>

=

>+

Protection Updates Label

Enter the label for the Protection Updates Web Address.

Text entry

Protection Updates Web Address

Enter the URL for the web page where the Production Updates can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Signature Version

The build number or date and build number of the required signature file.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Signature Version Label

Label for the Signature Version Web Address.

Text entry

Signature Version Web Address

Enter the URL for the web page where the required signature version can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Spyware Definition

Number of the required spyware definition file.

**

Version

The number of the required virus definition file.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Version Label

Enter the label for the Version Web Address.

Text entry

Version Web Address

Enter the URL for the web page where the required version can be located and downloaded.

When a host fails the scan this URL appears in the Failed Policy Results view.

URL

Virus Definition

Used to identify the virus definition version installed. May be the name of the definition file, the date of the file, a version number,etc.

Select the operator that will apply to the definition value found on the host: greater than, equal to, or both.

**

>

=

>=

Virus Definition

VDF

Label

The label for the VDF web address.

Text entry

Virus Definition

VDF

Web Address

The URL for the web page where updated definitions can be located and downloaded. Supply a local or Internet URL. This URL will be displayed on the Failed Policy Results view if the host fails the scan.

URL

Virus Signature

The date of the required virus signature.

YYYY-MM-DD

Web Address

Enter the URL of the web page that displays information about the product if the host fails the scan.

URL

Windows Operating System

Select any or all Windows operating systems required for the selected product.

Software specific parameters

Eset-NOD32

Minimum Scanner Version (nod32.exe)

The number of the required scanner version of the file nod32.exe.

**