Change the Default Block Time

Whenever IWSVA detects an Internet threat in a client download, it will take the action configured for that type of threat (clean, delete, quarantine) and display a notification message in the client's browser.

IWSVA continues to block all subsequent requests for the same URL—organization wide—for a default of four hours. Those users will see a URL blocking notification.

To configure the default block time (in hours), change the parameter infected_url_block_length under the [Scan-configuration] section of /etc/iscan/intscan.ini file, and execute /etc/iscan/S99ISproxy stop and /etc/iscan/S99ISproxy start. Restart the service.

To disable auto URL block, change the parameter disable_infected_url_block under the [Scan-configuration] section of /etc/iscan/intscan.ini file, and execute /etc/iscan/S99ISproxy stop and /etc/iscan/S99ISproxy start. Restart the service.

About disable_infected_url_block parameter

no: Enables auto URL blocking

yes: Disables auto URL blocking