User Guide

CHAPTER 5. ADDITIONAL
SETTINGS OF KASPERSKY
ANTI-VIRUS
This section contains a detailed explanation of basic parameters of Kaspersky
Anti-Virus. Unlike the required settings essential for application functioning and
specified during product installation and post-install setup, additional
configuration can be performed at the administrator's discretion. It is aimed to
extend the functionality of the application and its customization to your corporate
security policy.
5.1. Creating groups
The use of groups allows an administrator to define various parameters for anti-
virus processing of objects for different user groups being requested or
transferred through a proxy server. A request is associated with a specific group
according to the IP address of the client computer requesting an object through a
proxy server and the URL of that object.
Ensure that the icap_send_client_ip parameter in Squid configuration
file is set to on. The value means that Squid will transfer the client's IP
address to Kaspersky Anti-Virus.
If request parameters do not match any of the existing groups, the application will
process requested objects in accordance with the rules specified for the default
group.
Parameters of each group are stored in the following five sections of the
application configuration file:
• [icapserver.groups:<group name>] contains the parameters that define
the group applicability range (IP addresses of clients, object URLs) and
group priority.
• [icapserver.filter:<group name>] contains filtration rules for the <group
name> group.
• [icapserver.engine.options:<group name>] contains the parameters of
anti-virus scanning used to process the objects associated with that
group.