Flow-based antivirus solution

You can use the flow-based antivirus solution to scan your network traffic and prevent threats in real-time using a unified pattern-matching engine. The flow-based antivirus solution provides improved performance and efficacy for your network traffic by implementing explicit byte-pattern matching on the firewall device. It also provides inline-blocking capability based on the threat intelligence and recent threat detection events.

To enforce the flow-based antivirus solution, you must: 

1. Verify that you have a valid Juniper license. For licensing information about AI-Predictive Threat Prevention, see Software Licenses for SRX Series Firewalls.
2. Apply the antivirus policy to a network firewall policy using the [set security policies from-zone from-zone to-zone to-zone policy policy-name then permit application-services anti-virus-policy av-policy] command. 

By default, the latest antivirus signature pack will be automatically downloaded from the Juniper Networks CDN server to your firewall device at regular intervals. You can also trigger an antivirus database update using the [request services anti-virus update] command. To query the antivirus scan statistics, use the [show services anti-virus statistics] command.