Adding the profile - GUI
1. Go to Policy & Objects > Policy > IPv4.
2. Use your preferred method of finding a policy.
• If the ID column is available you can use that.
• You can also choose based on your knowledge of the parameters of the policy
• Select the policy with ID value of 11
3. In the Edit Policy window, go to the Security Profiles section
4. Turn ON AntiVirus, and in the drop down menu for the field, select default
5. If the AntiVirus profile is proxy-based the Proxy Options field and drop down menu will be revealed.
6. The SSL/SSH Inspection field will automatically be set to ON and one of the profiles will need to be selected from the drop down menu. In this case default is selected.
7. The log options will depend on your requirements and resources but to verify that everything is working properly, it is a good idea to turn ON logging of All Sessions after setting up a new profile and after giving some time for logs to accumulate
8. Turn on Antivirus.
9. Select an antivirus profile.
10. Select OK to save the security policy.
Adding the profile - CLI
To select the antivirus profile in a security policy — CLI
config firewall policy
edit 11
set utm-status enable
set profile-protocol-options default
set av-profile basic_antivirus
end