--- title: "Setting Up Antivirus Scanning" slug: "setting-up-antivirus-scanning-2" tags: ["8.2", "Portal"] updated: 2024-12-24T16:30:45Z published: 2024-12-24T16:30:45Z canonical: "kb.ctera.com/setting-up-antivirus-scanning-2" --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.ctera.com/llms.txt > Use this file to discover all available pages before exploring further. # Setting Up Antivirus Scanning After adding the antivirus license, you add an antivirus server to the portal and then include antivirus scanning in a plan at the global level. Any portal assigned to this plan includes antivirus scanning. **Note** For details about adding a license key, received from CTERA, that includes antivirus, refer to [Adding and Removing Licenses](/v1/docs/adding-and-removing-licenses-4). **To add or edit an antivirus server:** 1. In the global administration view, select **Services > Antivirus** in the navigation pane. The **Antivirus** page is displayed. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-TOYWHE03.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A43%3A43Z&se=2026-11-11T05%3A43%3A43Z&sr=c&sp=r&sig=0suXNePSoLTr97OYB8ZHB%2B7574LzwCn%2BGvlaS8JrZeA%3D) The **Antivirus Status** bar at the top of the page shows the current status: **Active/RUNNING OK** – Antivirus is running on at least one server. **No Servers/NO SCANNING SERVERS ABVAILABLE** – There are no antivirus servers defined. **Failed/NO SCANNING SERVERS ABVAILABLE** – The antivirus server is not running. **Disabled/NOT RUNNING** – Antivirus scanning has been suspended. **Warning/NOT LICENSED** – The antivirus service is not licensed. 2. To add a new server, click **Add a Server**. The **New Antivirus Server** window is displayed. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-6TNVKI15.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A43%3A43Z&se=2026-11-11T05%3A43%3A43Z&sr=c&sp=r&sig=0suXNePSoLTr97OYB8ZHB%2B7574LzwCn%2BGvlaS8JrZeA%3D) Or, To edit an existing antivirus server, click the server’s name. The antivirus server window is displayed with the server as the window title. 3. Specify the details: **Name** – A name for the server. **Scanning server type** – Select a supported antivirus server: **Server URL** – The URL of the server, including the ICAP port and the name of the service. The default ICAP port is 1344. The antivirus service name is configurable in the antivirus server software. Assuming the default ICAP port and default antivirus service name: For all the scanning server types except for ESET, the URL is `http://IP:1344/avscan` For ESET the URL is `http://IP:1344/av_scan` **Server connection timeout** – The server's connection timeout, in seconds. - McAfee Web Gateway - Symantec Protection Engine - ESET Gateway Security - Sophos AV - McAfee VirusScan Enterprise for Storage - Trend Micro InterScan – Choose this option for either Trend Micro InterScan or Trend Micro Web Security 4. Click **Save**. The server is added. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-OXWRIV6E.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A43%3A43Z&se=2026-11-11T05%3A43%3A43Z&sr=c&sp=r&sig=0suXNePSoLTr97OYB8ZHB%2B7574LzwCn%2BGvlaS8JrZeA%3D) 5. Click **Settings** in the Antivirus status bar to configure the antivirus settings. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-BXNJGPAZ.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A43%3A43Z&se=2026-11-11T05%3A43%3A43Z&sr=c&sp=r&sig=0suXNePSoLTr97OYB8ZHB%2B7574LzwCn%2BGvlaS8JrZeA%3D) 6. Specify the settings: **When threat is detected** – Either block files that contain a threat from being downloaded and move them to quarantine or copy the files to quarantine and email about a possible threat. **Maximum content size to scan** – The maximum size of files that will be scanned. Make sure that this value is less than the maximum specified by the vendor. For example, for *McAfee VirusScan Enterprise for Storage*, the maximum file size is 128MB. **Retain quarantine file for** – The amount of time that quarantined files are saved in quarantine before being deleted. **Connections per ICAP Server** – The number of connections to the ICAP server. Make sure that this value is less than the maximum specified by the vendor. For example, for *McAfee VirusScan Enterprise for Storage*, the default is 100. 7. Click **SAVE**. 8. Click **Enable** to start the service. The **Antivirus** page is redisplayed showing that the service is **Active**. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-3O6PNGUQ.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A43%3A43Z&se=2026-11-11T05%3A43%3A43Z&sr=c&sp=r&sig=0suXNePSoLTr97OYB8ZHB%2B7574LzwCn%2BGvlaS8JrZeA%3D) **To set up antivirus scanning in a plan:** 1. In the global administration view, select **Provisioning > Plans** in the navigation pane. The **Plans** page is displayed. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-VV9LWQ02.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A43%3A43Z&se=2026-11-11T05%3A43%3A43Z&sr=c&sp=r&sig=0suXNePSoLTr97OYB8ZHB%2B7574LzwCn%2BGvlaS8JrZeA%3D) 2. Click the plan to activate antivirus scanning or click **New Plan** to add a plan. The plan wizard opens, displaying the **Services** window. ![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-TE9I83IU.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A43%3A43Z&se=2026-11-11T05%3A43%3A43Z&sr=c&sp=r&sig=0suXNePSoLTr97OYB8ZHB%2B7574LzwCn%2BGvlaS8JrZeA%3D) - Check **Antivirus Service** to activate the antivirus feature and continue with the wizard to completion. When antivirus is activated, files are scanned for malware automatically and transparently, before they are downloaded for the first time.