Справочник Пользователя для SonicWALL 4.5

Скачать
Страница из 212
99
Enforced Client Product Guide
Using the Virus and Spyware Protection Service
Configuring policies for virus and spyware protection
4
Select a spyware protection mode 
You can specify how the virus and spyware protection service responds to detections of 
potentially unwanted programs on client computers. 
„
Protect
: It attempts to clean the detected item. If the item cannot be cleaned, a copy of the 
item is placed in a quarantine folder and the original item is deleted.
„
Prompt
: It displays a dialog box with information about the detection, and allows the user to 
select a course of action. This option is the default.
„
Report
: It reports detections to the SecurityCenter and takes no additional action.
For all modes, detections are reported to the SecurityCenter, where you can view information 
about them in reports. 
Tip
To specify a response to potentially unwanted program detections: 
On the 
Groups + Policies
 page, click 
Add Policy
 (or click 
Edit
 to modify an existing policy). 
Click the 
Spyware Protection 
tab, select a 
Spyware Protection Mode
, then click 
Save
Use the following table to determine how policy options are implemented in the different 
protection modes. 
Note
To prevent popup prompts from appearing on client computers when threats are detected, and 
for highest security, we recommend using 
Protect 
mode.
 
Mode 
Behavior of protection service 
Report 
„
No user prompts. 
„
Detections reported to SecurityCenter. 
„
Administrator can select approved programs, which are not reported as 
detections. 
„
Can be used as a 
Prompt 
„
Users prompted about detections. 
„
Detections reported to SecurityCenter. 
„
Administrator can select approved programs. These programs are not reported 
as detections, and users are not prompted for a response to them. 
„
Users can approve additional programs in response to prompts. These are 
reported to SecurityCenter. 
Protect 
„
Users not prompted about detections. 
„
Users notified about deleted or quarantined programs. 
„
Detections reported to SecurityCenter. 
„
Administrator can select approved programs. These programs are not reported 
as detections. 
If the policy is changed from 
Prompt
 mode to 
Protect
 mode or 
Report
 mode, the virus and 
spyware protection service saves user settings for approved programs. If the policy is then 
changed back to 
Prompt
 mode, these settings are reinstated.