• SonicOS 8
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• Capture ATP
  • About Capture ATP
    • Files are Preprocessed
    • Files Blocked Until Completely Analyzed
    • Files are Sent over an Encrypted Connection
    • Capture ATP Friendly Filename Display
    • Activating the Capture ATP License
  • Enabling Capture ATP
  • About the Capture ATP Page
    • Basic Setup Checklist
    • Bandwidth Management
    • Exclusions
    • Custom Blocking Behavior
  • Configuring Capture ATP Settings
  • Disabling GAV or Cloud Gateway Anti-Virus
  • Capture ATP Location
• Scanning History
• SonicWall Support
  • About This Document

Files Blocked Until Completely Analyzed

For HTTP/HTTPS downloads, Capture ATP has an option, Block file download until a verdict is returned, that ensures no packets get through until the file is completely analyzed and determined to be either malicious or benign. The file is held until the last packet is analyzed. If the file has malware, the last packet is dropped, and the file is blocked. The threat report provides information necessary to respond to a threat or infection.