IntelligentAV

itCOdtQ

I have Gateway Antivirus and IntelligentAV running on my firewall. I see Gateway Antivirus is scanning many objects like normal, but IntelligentAV has only scanned two objects. I thought IntelligentAV always ran when Gateway Antivirus hasn't detected a threat. So, shouldn't the amount of objects scanned be close to the same between these two services?

james.carson

Hi @itCOdtQ

IntelligentAV only scans certain file types.

(About IntelligentAV)
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/intelligentav/intelligentav_about_c.html

-Microsoft Office documents (.doc, .docx, .xls, .xlsx, etc.)
-Windows portable executable (PE) files (.exe, .dll, etc.)
-PDF documents (.pdf)
-Mach-O formatted files (Mac executables)
-ELF binaries (Linux executables)

Like with GatewayAV, in order for InteligentAV to scan files that come over HTTPS, content inspection must be enabled. Additionally, the HTTP proxy action it points to must have the antivirus engine enabled.