23
White Paper Access Protection in McAfee VirusScan Enterprise and
Host Intrusion Prevention
File/Folder Protection
File/Folder protection rules allow you to prevent read access, write access, file execution, and creation
or deletion of files and folders. This feature can be very powerful in preventing intrusions, as well as
stopping viruses from spreading during an outbreak. Once you restrict access to a file or folder, the
restriction remains in place until the administrator removes it.
File/Folder protection rules
To create user-defined File/Folder protection rules, provide the following:
Rule name—Type the name for this rule.
•
Processes to include—Processes to include in this rule. Wildcards are allowed.
•
Processes to exclude—Processes to exclude from this rule. Wildcards are allowed.
•
File or folder name to block—Block access to the specified file or folder. Complete path to the
•
folder, or file this rule will affect. Partial folder/file names with wildcards can protect multiple,
similar folders/files with a single rule.
Examples: C:\Folder, C:\Fol*, C:\Folder/*.exe
Browse file—Navigate to the file.
º
Browse folder—Navigate to the folder.
º
File actions to prevent—Specify which action or actions you wish to block for the selected
•
folder/file, with this rule; Read access, write access, file execution, file creation, file deletion, or
any combination of these options.
Read access to files—Block read access to the specified files.
º
Write access to files—Block write access to the specified files.
º
Files being executed—Block files from being executed in the specified folder.
º
New files being created—Block new files from being created in the specified folder.
º
Files being deleted—Block files from being deleted from the specified folder.
º
Registry Blocking
Block users or processes from taking action on specified registry keys or values.
Registry-blocking protection rules prevent unauthorized programs from altering, creating, or deleting
registry keys and values that they shouldn’t.
Registry-blocking rules
To create user-defined registry-blocking rules, provide the following:
Rule name—Specify the name for this rule.
•
Processes to include—Restrict these processes from access. Wildcards are allowed.
•
Processes to exclude—Allow access to these processes. Wildcards are allowed.
•
Registry key or value to protect—Protect this registry key or value:
•
Select a root key or value from the drop-down list.
º
Type a key or value in the text box.
º
Note: Selecting the root key or value from the drop-down list is optional. Use either of these
methods to specify the key or value:
Select the root key or value from the drop-down list, then type the remaining path to the key or
º
value in the text box.
Type the full path to the key or value in the text box.
º
(122 paginas)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales