Stormshield SN series - POP3 Commands Tab; Analyzing Files Tab; Sns-En-User_Configuration_Manual-V3 - Copyright © Stormshield

Connection
Keep original source IP
address
When a request is made by a web client (browser) to the server, the firewall will
intercept it and check that the request complies with URL filter rules and then relays
the request.
If this option is selected, the new request will use the original source IP address of the
web client that sent the packet. Otherwise, the firewall’s address will be used.
Support
Disable intrusion
prevention
When this option is selected, the scan of the POP3 protocol will be disabled and traffic
will be authorized if the filter policy allows it.
Log each POP3 request Enables or disables the logging of POP3 requests.
“POP3 Commands” tab
Proxy
Main commands
This menu allows you to authorize or reject POP3 commands defined in the RFCs. You can let
commands pass, block them or analyze the syntax and check that the command complies with
the current RFCs in force.
Modify all commands button: allows authorizing, rejecting or checking all commands.
Command Indicates the name of the command.
Action Allows defining the behavior of the command out of 3 possibilities. Click on the
command’s action to modify it:
l Scan: data relating to the command will be scanned in compliance with the RFCs
and blocked where necessary.
Example: If the name of the USER command does not comply with the RFCs, the
packet will not be sent to the server.
l Pass without scanning: the command will be authorized, without being checked.
l Block: the command will be blocked automatically, and an alarm will be raised to
indicate it.
Other commands allowed
Command This field allows adding additional personal commands.
“Analyzing files” tab
Maximum size for
antivirus and
sandboxing scan (KB)
This option depends on the hardware capacities of each firewall model. It corresponds
to the maximum size of files that will be scanned. This limit has been set to 1000 KB
by default.
WARNING
When manually defining a size limit for analyzed data, ensure that all values are coherent.
The total memory space corresponds to a common space for all the resources reserved for
the Antivirus service. If you define the size limit for analyzed data on POP3 as 100% of the
total size, no other files can be analyzed at the same time.
Page 264/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
PROTOCOLS