SonicWALL 4.5 Manual De Usuario

Descargar
Página de 212
100
Enforced Client Product Guide
Using the Virus and Spyware Protection Service
Configuring policies for virus and spyware protection
4
Learn mode 
Report
 mode can be used as a “learn mode” to help you determine which programs to approve 
Report
 mode, the virus and spyware protection 
service tracks but does not delete unrecognized programs. You can review detected programs in 
the 
Unrecognized Programs
 report (see 
) and approve 
those that are appropriate for your policy. When you no longer see programs you want to 
approve in the report, change the policy setting to 
Prompt
 or 
Protect
 mode. 
Specify approved programs 
On client computers, the virus and spyware protection service maintains a list of approved 
programs
 that are not identified as potentially unwanted programs. You can configure the list of 
approved programs for all computers using a policy. In addition, users can approve programs for 
individual client computers when the firewall protection service is set to 
Prompt
 mode. 
To configure approved programs in a policy: 
On the 
Groups + Policies
 page, click 
Add Policy
 (or click 
Edit
 to modify an existing policy). 
Click the 
Spyware Protection 
tab. 
Under 
Approved Programs
, select the type of program (a detected program or a user-approved 
program). 
Select a program, then click 
Save
The selected program is added to the list of allowed programs. (No list appears until you have 
added at least one approved program to the policy.) 
Tip
To remove an approved program from a policy: 
On the 
Groups + Policies
 page, click 
Add Policy
 (or click 
Edit
 to modify an existing policy). 
Click the 
Spyware Protection 
tab. 
In the list of 
Approved Programs
, click 
remove
 for each program you want to delete from the 
list, then click 
Save
Set advanced spyware protection options 
On the 
Groups + Policies
 page, use the 
Advanced Settings 
tab to select the types of potentially 
unwanted programs to search for during scans. 
Caution
Exclude only programs you know are safe. If you are unsure about a program, we recommend 
not adding it to the approved programs list. 
Use the 
Unrecognized Programs
 report to view a complete listing of all programs detected on 
client computers. 
Threat type 
Description 
Jokes 
Programs designed to be mistaken for a virus. They might alarm or annoy a 
user but do not harm files or data. They are intended to waste time and 
resources. 
Remote admin tools 
Programs that can be used from a remote location to access a computer. 
Some remote administration tools serve useful purposes, such as allowing 
users to access their files from home, but others can be used by unauthorized 
persons to monitor user activities and take control of a computer.