I recently did two things:
1.) I changed from an evaluation license to a purchased license
2.) I updated from 184.108.40.206 to 220.127.116.11
so I am not able to tell what triggered the following:
I seem to no longer be able to select between McAfee malware engine, Avira malware engine or both.
I'm looking for that under Policy > Settings > Engines > AntiMalware > Gateway Anti-Malware. there used to be a setting to let me decide between
- Full McAfee coverage
- Layered coverage
- Duplicate coverage
- Avira only
Now a this page I only see the advanced settings:
- Enable Antivirus prescan
- Enable GTI file reputation queries
- Enable heuristic scanning
From the update.log I can tell it has updated Avira-VDF since then, so it seems not to be completely gone.
Its your license which caused this change. You probably do not have Gateway Anti-Malware purchased on the license. If you login to the Content Security portal you will see an itemized license, which says what features are associated with that license.
Ok, I understand. The licence indeed does not include "McAfee Gateway Anti-Malware" as the evaluation license did. I will have that checked.
Does this mean, MWG does not do any AV checking at all? It blocks the EICAR virus with the current license.
Yes, AV scanning will still occur as you found. It will just not use the specialized Gateway Anti-Malware Engine, or allow for use of the third party Avira engine.
thank you and sorry for bothering you again: where can I read about the difference between "normal" AV scanning and the "specialized Gateway Anti-Malware Engine"?