DTAVSEL-005 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown program viruses.


Due to the ability of malware to mutate after infection, standard anti-virus signatures may not be able to catch new strains or variants of the malware. Typically, these strains and variants will share unique characteristics with others in their virus family. By using a generic signature to detect the shared characteristics, using wildcards where differences lie, the generic signature can detect viruses even if they are padded with extra, meaningless code. This method of detection is Heuristic detection.


From a desktop browser window, connect to the McAfee VirusScan Enterprise for Linux (VSEL) Monitor (WEB interface) of the Linux system being reviewed and logon with the nails user account.

In the VSEL WEB Monitor, under 'Configure', select 'On-Access Settings'.
Under 'Anti-virus Scanning Options', select the 'Find unknown program viruses' check box.

Click 'Apply'.

See Also


Item Details


References: 800-53|SI-3c.2., CAT|II, CCI|CCI-001243, Rule-ID|SV-77569r1_rule, STIG-ID|DTAVSEL-005, Vuln-ID|V-63079

Plugin: Unix

Control ID: b4a44b4b57b28458fe390c0fa499c7b0aa6ef72141fd04a1c271e7319e6e2ed0