McAfee VIRUSSCAN ENTERPRISE Guía de usuario descargar pdf (Pagina 43)

DAT files and how they work

When the scanning engine searches through files looking for threats, it compares the contents

of the scanned files to

known threat information

stored in the detection definition (DAT) files.

The known threat information, called

signatures

, is information McAfee Labs has found and

added to the DAT files.

Besides the signatures, the DAT files also includes how to clean and counteract the damage

created by the detected virus. That is why it is so important to download the most recent version

of DAT file used by VirusScan Enterprise.

CAUTION: If the signature of a certain virus is not contained in any of the DAT files you have

installed, that virus will not be detected by the scanning engine. Also, the scanning engine must

be the latest version to be able to fully utilize the latest DAT files.

VirusScan Enterprise also uses heuristics, called Artemis, to check for suspicious files along with

the DAT files. Refer to

How Artemis works

for more information.

The various DAT files are stored at the following path:

\Program Files\Common Files\McAfee\Engine

The importance of an update strategy

The importance of an update strategy cannot be overstated. Without the latest DAT files and

scanning engine installed on your system, it is not fully protected from the latest viruses. There

has been an unprecedented rise in the number, propagation rate, and prevalence of new

malware. In addition, the growing amount of adware and spyware requires more consistent

and available detection and removal.

McAfee Labs releases DAT file updates at about 6:00 PM (GMT) almost every day. Naturally,

outbreaks will still occur at awkward times and require emergency releases. When a daily DAT

is released early, to pre-empt a potential outbreak, no second DAT is released that day at the

normally scheduled time, unless another emergency situation requires one.

How an update strategy is determined

You can update the DAT files and scanning engine, used by VirusScan Enterprise, using many

methods. You can use AutoUpdate tasks, manual updates, login scripts, or schedule updates

with management tools.

Using an update task allows you to:

• Schedule network-wide DAT file rollouts — You might stagger your update tasks, or

set a schedule that phases in DAT file updates to different parts of the network at convenient

times and with minimal intervention from administrators or network users.

• Split duties for rollout administration — To increase network bandwidth efficiency, use

different servers or domain controllers, among different regions of wide-area networks, or

across other network divisions to keep update traffic primarily internal. This can also reduce

the potential for network security breaches.

• Reduce the waiting time required to download new DAT or upgraded engine files

— Traffic on McAfee computers increases dramatically on regular DAT file publishing dates

and whenever new product versions are available. Avoiding the competition for network

bandwidth enables you to deploy your new software with minimal interruptions.

Part I - Prevention: Avoiding Threats

Updating detection definitions

43McAfee VirusScan Enterprise 8.8 Product Guide

1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 165 166

Comentarios a estos manuales

Sin comentarios

McAfee VIRUSSCAN ENTERPRISE Guía de usuario Pagina 43

Comentarios a estos manuales