McAfee MAP-3300-SWG Product Guide - Page 175

Overview of Web features Web Configuration Basic FTP settings Table 163 Option definitions Option Enable FTP Settings Definition When selected, scans all FTP traffic. If a protocol is disabled, the appliance will not scan any traffic for that protocol, even if the specific scan options are enabled. Enabling a protocol does not automatically enable all the different scan options. They must be enabled separately. FTP ports Displays the number of the port that will be scanned. Default value is 21. Specifies the ports that the appliance will scan for threats when in Explicit Proxy mode. A typical port number is 21. If an appliance is operating in a transparent mode, you can exclude some parts of the network from scanning traffic in a protocol, either all the time or for some periods during the day. The most secure option is to scan all traffic. Before turning off scanning of any traffic, consider the security risks. Click these icons and the port headings to reveal icons for managing the port information: Enable reverse DNS lookups When selected, enables the appliance to find the host name associated with an IP address Change reverse lookup settings only if you fully understand the consequences. If you deny reverse DNS look-ups, some functions might fail. Timeouts Table 164 Option definitions Option Command timeout Definition Specifies how long the appliance waits to close an FTP connection if it has received no FTP command. Default value is 300 seconds. Check connection every Specifies how often the appliance checks the FTP connection. Default value is 20 seconds. FTP Protocol Settings Use this page to specify how the appliance controls the communication between the appliance and hosts in your networks. Use for features such as data trickling and the keep-alive interval. Web | Web Configuration | FTP | Protocol Settings The page has these sections: • Data processing • Download status and data trickling McAfee Email and Web Security Appliances 5.6.0 Product Guide 175