Symantec Web Gateway can block file uploads and file downloads when it detects malware in the file. Symantec Web Gateway can also block infected computers from accessing the Internet. Symantec Web Gateway can block, monitor, or ignore malware by category. Generally you should block all malware for all users. If necessary, you can configure exceptions for certain categories of malware for certain computers.
If the operating mode is set to block, malware is blocked by default. Otherwise, malware blocking for all computers is not enabled by default. To enable malware blocking for all computers, configure a policy for all computers and set the Spyware default action to Block.
The following actions are available for the File and Active Content Detection, Spyware Category, Spyware Severity, Detection Type, and Spyware Default settings:
Use the Spyware Default action for this type of malware. This action is not applicable to the File and Active Content Detection or Spyware Default setting.
Block this type of malware and record detected malware of this type for reports.
Allow this type of malware but record detected malware of this type for reports.
Allow this type of malware and do not record detected malware of this type for reports.
You must install Symantec Web Gateway in your network in the inline network configuration or proxy network configuration to block file downloads. If you configure Symantec Web Gateway in the port span/tap network configuration, the block action is not available in the Web GUI.
Continuing on the Policies > Configuration page, locate File and Active Content Detection, Spyware Category, Spyware Severity, Detection Type, and Spyware Default.
Under Spyware Default, click Block, Monitor, or Ignore.
The Spyware Default action is the default action for the Spyware Category, Spyware Severity, and Detection Type settings. When you click Use Default for any of those settings, the Spyware Default action is used.
To configure the action for file downloads, click an action next to File and Active Content Detection.