antivirus and port forwarding

erhan11

Hello I think I have created port forwarding when trying to activate antivirus on m200. How can I can cancel it?

Bruce_Briggs

Exactly what did you do?

erhan11

I clicked to activate antivirus subscription. And moreover I clicked for email antivirus, and added email server ip adress.

Bruce_Briggs

What does this have to do with port forwarding?

erhan11

I'm not sure but I can see some settings in snat

Bruce_Briggs

So you ran the Gateway Antivirus Setup Wizard?
And you selected Incoming SMTP in the Create new proxy policies ?

If so, indicating that this is what you did earlier would have helped.

If you in fact did this, and you want to undo this, then you need to delete the automatically created SNAT and the incoming SMTP policy that the wizard created.

erhan11

Ok thank you very much. This is what I was looking for. I'm sorry for poor explanation.

Not sure if I needed a new topic for this but how can I get gateway antivirus to for web browsing?

Bruce_Briggs

You need to set up a HTTP & HTTPS proxy.
You can enable GAV on the HTTP proxy action, which is in a HTTP proxy policy, and is specified in a HTTPS proxy policy which has inspection enabled.
For inspection on a HTTPS proxy policy, you will need to add a firewall certificate to each user's web browser(s)

Review these:

Configure Gateway AntiVirus Actions for HTTP Content
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/gateway_av/av_actions_config_http_c.html

HTTPS-Proxy: Content Inspection
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/proxies/https/https_proxy_contentinspection_c.html

You will see a HTTP proxy action name option on a HTTPS proxy when:
1) Domain Names Action = Allow, and you add a domain name entry and select Action = Inspect
2) Domain Names Action = Inspect