Description

This article describes loading the latest AV signature database offline for SRX devices.

Symptoms

The goal is to provide the AV signature database update path on an SRX devices.

Solution

There are different types of AV on SRX devices.

  1. Express Antivirus Scanner
    (This type is supported till Junos 12.3X48 release only. Junos 15.1X49-D10 onwards it is not supported)
    Database Update Path
    SRX-210 - http://update.juniper-updates.net/EAV/SRX210
    SRX-220 - http://update.juniper-updates.net/EAV/SRX220
    SRX-240 - http://update.juniper-updates.net/EAV/SRX240
    SRX-550 - http://update.juniper-updates.net/EAV/SRX550
    SRX-650 - http://update.juniper-updates.net/EAV/SRX650
  2. Full Antivirus Pattern Updates (Kaspersky)
    (This type is supported till Junos 12.3X48 release only. Junos 15.1X49-D10 onwards it is not supported)
    Database Update Path
    SRX-100 - http://update.juniper-updates.net/AV/SRX100
    SRX-110 - http://update.juniper-updates.net/AV/SRX110
    SRX-210 - http://update.juniper-updates.net/AV/SRX210
    SRX-220 - http://update.juniper-updates.net/AV/SRX220
    SRX-240 - http://update.juniper-updates.net/AV/SRX240
    SRX-550 - http://update.juniper-updates.net/AV/SRX550
    SRX-650 - http://update.juniper-updates.net/AV/SRX650
  3. Sophos Antivirus Protection

    Sophos antivirus uses a small set of data files that need to be updated periodically. These data files only contain information on guiding scanning logic and do not contain the full pattern database. The main pattern database, which includes protection against critical viruses, URI checks, malware, worms, Trojans, and spyware, is located on remote Sophos. Extensible List servers maintained by Sophos.

    Database Update Path
    http://update.juniper-updates.net/SAV/

     
  4. On-Device Avira Antivirus

    Junos OS unified threat management (UTM) integrates with Avira’s Antivirus functionality and provides full file-based scan engine. This antivirus protection secures your device by scanning the application layer traffic and blocks harmful content such as infected files, trojans, worms, spyware, and other malicious data. This type is supported on SRX-TVP platforms (SRX1500,SRX4100, SRX4200, SRX4600 ) VSRX and SRX-5KSPC3 only from Junos 18.4R1.

    The virus pattern database is available at the following locations:

    Default: https://update.juniper-updates.net/avira
    For SRX4100, SRX4200, and SRX4600 Series devices: https://update.juniper-updates.net/AVIRA/SRXTVP
    For SRX5K-SPC3 devices: https://update.juniper-updates.net/AVIRA/SPC3
    For vSRX: https://update.juniper-updates.net/AVIRA/VSRX

Modification History

2020-08-17:  Article reviewed for accuracy; no changes required.
2021-04-09: Added links for Avira download

Related Information