The GAM 2017 and later engines require GTI lookups to be enabled as documented in
KB85830. This product enables effective streaming and media detection, and GAM behavioral scanning function.
If you do not enable GTI and do not place the rule Set URL Filter Internal Settings at the top of your policy, you experience issues.
You see one or more of the following warnings in the MWG Dashboard, which indicate a misconfiguration. These warnings are followed by one of the following errors:
Warnings:
- McAfee Gateway Anti-Malware is disabled due disabled GTI lookups, and the product's security efficacy is reduced. Please review your settings (especially URL filter configuration) and consider enabling GTI lookups or use Gateway Anti-Malware's air-gapped mode available starting in McAfee Web Gateway 7.8.2. Please refer to KB90767 for further details.
- McAfee Gateway Anti-Malware is disabled due disabled GTI lookups, and the product's security efficacy is reduced. Please review your settings (especially 'Provide GTI to GAM' setting in antivirus configuration) and consider enabling GTI lookups or use Gateway Anti-Malware's air-gapped mode available starting in McAfee Web Gateway 7.8.2. Please refer to KB90767 for further details.
Errors:
- Gateway Anti-Malware's Stream Scanner is disabled. A common reason is that GTI lookups have been disabled. Please refer to KB90767 for further details.
- No active anti-virus scanner in at least one rule! (All of McAfee Antivirus, McAfee Gateway Anti-Malware, and Avira have been disabled for at least one configuration and/or rule, either directly, or indirectly by missing or contradictory settings.)
NOTE: The error is not displayed again for 24 hours to avoid dashboard flooding. To see the error again or test a changed configuration, restart the appliance or MWG services.
