V-222386

Discussion

Virus scanning software can be used to protect a system from penetration from computer viruses and to limit their spread through intermediate systems. <br /><br />The virus scanning software should be configured to perform scans dynamically on accessed files. If this capability is not available, the system must be configured to scan, at a minimum, all altered files on the system on a daily basis.<br /><br />If the system processes inbound SMTP mail, the virus scanner must be configured to scan all received mail.

Check Content

Verify an anti-virus solution is installed on the system. The anti-virus solution may be bundled with an approved host-based security solution.

If there is no anti-virus solution installed on the system, this is a finding.