McAfee UTILITIES 4.0 Guía de usuario Pagina 17
- Pagina / 112
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
• Apply the new policy to a set of computers and monitor the results.
• Repeat this process with each production group type.
Automatic tuning
Automatic tuning removes the need to constantly monitor all events and activities for all users.
• Apply adaptive mode for IPS, Firewall, and Application Blocking policies, or apply learn mode
for Firewall and Application Blocking policies.
• In adaptive mode, IPS events are not triggered and activity is not blocked, except for
malicious exploits. Client rules are created automatically to allow legitimate activity.
• In learn mode, the user receives an alert message and must indicate whether to allow or
block an activity. As a result, client rules are created.
• Review the lists of client rules.
• Promote appropriate client rules to administrative policy rules.
• After a few weeks turn off the adaptive or learn mode.
• Monitor the test group for a few days to be sure the policy settings are appropriate and offer
the desired protection.
• Repeat this process with each production group type.
Where to find policies
ePolicy Orchestrator provides two locations to view and manage Host Intrusion Prevention
policies:
• Systems | System Tree | Policies tab of a selected group in the System Tree
• Systems | Policy Catalog
Policies tab
Use the Policies tab to view the policies of a particular feature of the product, view details of
the policy, view inheritence information, edit policy assignment, and edit custom policies or
create a new policy relating to a selected group or system.
Policy Catalog
Use the Policy Catalog to create policies, view and edit policy information, view where a policy
is assigned, view the settings and owner of a policy, and view assignments where policy
enforcement is disabled.
Do this...To...
Click New Policy, name it, and edit the settings.
Create a policy
Click Edit (only available for My Default or custom policies).
Edit a policy
Click View (only available for McAfee Default or preconfigured policies).
View a policy
Click Rename and change the name of the policy (not available for default
or preconfigured policies).
Rename a policy
Click Duplicate, change the name of the policy, and edit the settings.
Duplicate a policy
Managing Your Protection
Management of policies
17McAfee Host Intrusion Prevention 7.0 Product Guide for use with ePolicy Orchestrator 4.0
- Product Guide 1
- Basic protection 8
- Advanced protection 8
- IPS policies 8
- Firewall policies 8
- Policy management 9
- Policy tracking and tuning 10
- Preset protection 11
- Adaptive and learn mode 11
- Dashboards and queries 12
- Managing Your Protection 13
- Management of policies 16
- Where to find policies 17
- Configuring polices 18
- Automatic tuning with clients 19
- Management of systems 20
- Host IPS server tasks 21
- Host IPS protection updates 22
- Checking in update packages 23
- Updating clients with content 23
- Configuring IPS Policies 24
- Behavioral rules 25
- Reactions 26
- Exception rules 26
- Working with IPS signatures 30
- Creating signatures 33
- Creating exception rules 39
- Working with IPS events 40
- Managing IPS events 41
- Managing IPS client rules 43
- Configuring Firewall Policies 45
- Stateful packet filtering 46
- Stateful packet inspection 46
- State table 47
- State table functionality 47
- How firewall rules work 47
- How stateful filtering works 48
- Stateful protocol tracking 49
- Overview of Firewall policies 51
- Firewall client rules 55
- Quarantine policies and rules 55
- 4 Click Save to save changes 60
- Creating firewall rule groups 61
- Configuring General Policies 76
- Unlocking the Windows client 78
- Working with Host Intrusion 81
- Prevention Clients 81
- Creating 85
- System tray icon 86
- Setting client UI options 87
- Client error reporting 88
- Windows client alerts 90
- Responding to Firewall alerts 91
- About the IPS Policy tab 93
- About the Firewall Policy tab 94
- About the Blocked Hosts tab 96
- About the Activity Log tab 98
- Solaris client issues 100
- Client installation issues 100
- Client operations issues 100
- Stopping the Solaris client 101
- Overview of the Linux client 102
- Notes about the Linux client 103
- Linux client issues 103
- Stopping the Linux client 105
- Restarting the Linux client 105
- (continued) 107
Relacionado con productos y manuales para Software McAfee UTILITIES 4.0
Software McAfee QUICKCLEAN 3.0 Guía de usuario
(41 paginas)
(41 paginas)
Software McAfee UNINSTALLER 6.0 Guía de usuario
(99 paginas)
(99 paginas)
Software McAfee QUICKCLEAN 1.0 Guía de instalación
(29 paginas)
(29 paginas)
Software McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Especificaciones
(120 paginas)
(120 paginas)
Software McAfee QUICKCLEAN 1.0 Guía de usuario
(41 paginas)
(41 paginas)
Software McAfee UTILITIES 4.0 Manual de usuario
(11 paginas)
(11 paginas)
Software McAfee QUICKCLEAN 1.0 Manual de usuario
(22 paginas)
(22 paginas)
Software McAfee GUARD DOG 2 Guía de usuario
(128 paginas)
(128 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.068 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales