Enabling and Disabling FTP 'REST' and HTTP Byte-Range Requests with Gateway Anti-Virus

03/26/2020 7 9522

DESCRIPTION:
Enabling and Disabling FTP 'REST' and HTTP Byte-Range Requests with Gateway Anti-Virus

RESOLUTION:

The SonicWall Gateway Anti-Virus (GAV) security service, by default, suppresses the use of the FTP 'REST' (restart) request to prevent the sectional retrieval and reassembly of potentially malicious content. This is done by terminating the connection and thus preventing the user from receiving the malicious payload. By enabling this option you will override this default behavior. The SonicWall GAV, by default, also suppresses the use of HTTP Byte-Range requests to prevent the sectional retrieval and reassembly of potentially malicious content. This is done by terminating the connection and thus preventing the user from receiving the malicious payload. By enabling this option you will override this default behavior.

Follow these steps to modify the behavior of FTP REST and HTTP Byte-Range requests:

1. Log into the management GUI of the Firewall.

2. Select Security Services  > Gateway Anti-Virus.

3. Click the Configure GAV Settings button.

   Activate or deactivate the following check boxes as needed:

   • enable FTP 'REST' requests with Gateway AV

   • enable HTTP Byte-Range requests with Gateway AV

4. Click OK.