Figure 224 illustrates the antivirus scanning order when using flow-based scanning (i.e. the flow-based database). The antivirus scan takes place before any other antivirus-related scan. If file filter is not enabled, the file is not buffered. The antivirus scan includes scanning for viruses, as well as for grayware and heuristics if they are enabled.
File filtering includes file pattern and file type scans which are applied at different stages in the antivirus process.
Figure 224: Antivirus scanning order when using flow-based scanning
