---
title: "Managing Antivirus Servers"
slug: "managing-antivirus-servers-5"
tags: ["8.2", "Portal"]
updated: 2024-12-24T16:31:44Z
published: 2024-12-24T16:31:44Z
canonical: "kb.ctera.com/managing-antivirus-servers-5"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.ctera.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Antivirus Servers

You can specify how infected files are handled and suspend antivirus scanning.

**To configure how infected files are handled:**

1. In the global administration view, select **Services > Antivirus** in the navigation pane. The **Antivirus** page is displayed. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-3O6PNGUQ.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A49%3A38Z&se=2026-11-11T05%3A49%3A38Z&sr=c&sp=r&sig=pyHPmKtfdbioUz0RleJAWJWiu1FwLItBXZUU0M0mquA%3D)
2. Click **Settings** to configure antivirus scanning. The **Antivirus Settings** window is displayed. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-F2BM9ESU.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A49%3A38Z&se=2026-11-11T05%3A49%3A38Z&sr=c&sp=r&sig=pyHPmKtfdbioUz0RleJAWJWiu1FwLItBXZUU0M0mquA%3D) **When a threat is detected** – Specify how to handle infected files:

**Maximum content size to scan** – The maximum size of a file to be scanned. Since most viruses are found at the beginning of the file, CTERA does not recommend changing this value. Increasing the value will adversely impact scanning performance. **Retain quarantine files for** – The number of days that files are kept in quarantine before being removed. **Connections per ICAP Server** – The maximum number of connections allowed per each ICAP server that is configured either as an application server or as a background scanner. For example, if the connection count is set to 20, the recommended default, and there are 5 application servers and 2 scanning servers configured in the portal cluster (7 servers in total), the maximum total number of concurrent connections to each ICAP server is 140 connections (7*20).

          **Note**

          

CTERA recommends that the background scanning servers are not application servers.
  - **Log Only** – An email is sent to the portal listing the file that might be infected and the file is copied to quarantine. It is still possible to download or preview the infected file.
  - **Block Viruses** – The infected file is not downloaded and it is quarantined.

**To suspend or resume antivirus scanning for all servers:**

1. In the global administration view, select **Services > Antivirus** in the navigation pane.  

The **Antivirus** page is displayed.
2. In the status bar, click **Suspend** to suspend antivirus scanning or **Resume** to resume antivirus scanning for all servers.

**To suspend or resume antivirus scanning for a specific server:**

1. In the global administration view, select **Settings > Antivirus** in the navigation pane.  

The **Antivirus** page is displayed.
2. Select the server row in the list of **Antivirus Server**.
3. Click **Suspend** to suspend antivirus scanning or **Resume** to resume antivirus scanning for the server.  

The status for resumed servers is `Connected` and for suspended servers it is `Disabled`

## Deleting an Antivirus Server

**To delete an antivirus server:**

1. In the global administration view, select **Services > Antivirus** in the navigation pane. The **Antivirus** page is displayed. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-3O6PNGUQ.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A49%3A38Z&se=2026-11-11T05%3A49%3A38Z&sr=c&sp=r&sig=pyHPmKtfdbioUz0RleJAWJWiu1FwLItBXZUU0M0mquA%3D)
2. Either,

Or,
  1. Select the row of the antivirus server to delete and click **Delete**.  

A confirmation window is displayed.
  2. Click **Delete Server** to confirm.
  1. Click the antivirus server’s name in the list of **Antivirus Servers**.  

The antivirus server window is displayed with the server name as the window title.
  2. Click **Delete**.  

A confirmation window is displayed.
  3. Click **Yes** to confirm.