McAfee MSA09EMB1RAA Product Guide
McAfee MSA09EMB1RAA - Site Advisor Plus 2009 Manual
 |
UPC - 731944578675
View all McAfee MSA09EMB1RAA manuals
Add to My Manuals
Save this manual to your list of manuals |
McAfee MSA09EMB1RAA manual content summary:
- McAfee MSA09EMB1RAA | Product Guide - Page 1
McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 2
of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN - McAfee MSA09EMB1RAA | Product Guide - Page 3
Viewing safety reports 10 Administrators customize policy settings 11 Setting up a Browsing Security Strategy 13 Guidelines for creating a strategy 13 Select the right policy Working with Prohibit lists 32 Customize messages for users 35 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 3 - McAfee MSA09EMB1RAA | Product Guide - Page 4
39 Track events for reports 39 Tracking visits to domains and downloads 40 Tracking domain page views and downloads 41 Tracking green site content categories 41 Using Dashboards, Monitors, policy 53 Working with the Web Reporter 54 4 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 5
with Internet Explorer or Firefox or downloading files with Internet Explorer. SiteAdvisor Enterprise Plus is integrated with McAfee advanced protection solutions. This guide provides information that you need to create a browsing security strategy for your business and configure SiteAdvisor - McAfee MSA09EMB1RAA | Product Guide - Page 6
supports downloads. How safety ratings are compiled A McAfee Downloading files to check for viruses and potentially unwanted programs bundled with the download services that can be obtained without cost from other sources. • Additional analysis by McAfee no significant problems. (Yellow, download. - McAfee MSA09EMB1RAA | Product Guide - Page 7
button is gray with disconnected cables. • In Internet Explorer, users can display or hide the menu button by using the View | Toolbars | McAfee SiteAdvisor menu option. This does not affect the functional status (enabled or disabled) of the SiteAdvisor Enterprise Plus client software. NOTE: Firefox - McAfee MSA09EMB1RAA | Product Guide - Page 8
license agreement, and its privacy policy. 2 If the communication error button appears, show the balloon for the site, and click Troubleshoot. The connection status page that appears indicates the possible cause of the communication error. 8 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 9
Keep in mind that it's sometimes more difficult to get good customer service or resolve disputes with websites registered outside of your country of residence. 's registry files. Each download link opens a detailed download analysis page. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 9 - McAfee MSA09EMB1RAA | Product Guide - Page 10
downloads, email practices, shopping experiences and more. This input is particularly important in helping the SiteAdvisor community guide are free to comment, disagree or clarify. These comments are posted unedited after we verify the authenticity of the person leaving the comment. We manually - McAfee MSA09EMB1RAA | Product Guide - Page 11
logo or image, for users who attempt to access: • Blocked sites • Warned sites • Authorized sites • Prohibited sites • Phishing pages • File downloads Event Tracking • Report on domain site visits. • Report on internal domain site visits. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 11 - McAfee MSA09EMB1RAA | Product Guide - Page 12
Assign actions (warn, block, or allow) to sites or site resources (such as file downloads and phishing pages) based on their ratings. • Apply threat factors to fine-tune rating actions ) See Configuring Policies for more information. 12 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 13
Browsing Security Strategy SiteAdvisor Enterprise Plus includes a default policy with settings recommended by McAfee to results. Prohibit, block, or warn about sites or downloads that present threats, and authorize sites that are important to McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 13 - McAfee MSA09EMB1RAA | Product Guide - Page 14
that contain threats. • Update policy settings to address any problems. • Run a purge task occasionally to clear out the your security or productivity goal... Use this feature... Use SiteAdvisor ratings to control access to sites, download Rating McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 15
SiteAdvisor Enterprise Plus to uniquely identify the site being rated for security. The focus of SiteAdvisor Enterprise Plus is protecting your managed systems visits to domains and downloads under Configuring Policies for more information. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 15 - McAfee MSA09EMB1RAA | Product Guide - Page 16
that you configure and enforce on managed client systems. Policies ensure that security software products are configured and function as your organization requires. When SiteAdvisor particular user when that user logs on, regardless 16 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 17
command, or logs on to a remote desktop or terminal service where the user's logon is not set to interactive, Setting up a Browsing Security Strategy. For more sites, pages on a site, or file downloads. NOTE: A Content Actions policy appears if McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 17 - McAfee MSA09EMB1RAA | Product Guide - Page 18
Programs control panel is not selected. No Prohibit list is set up. • Domains and downloads - Track: Selected. • Include traffic to internal sites: Set to Never. • Track pages selected. Phishing pages detected on allowed sites are blocked. 18 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 19
when the Web Filtering for Endpoint extension is installed.) Default policy settings • File download rating actions: • Yellow: Warn • Red: Block • Unrated: Allow All proxy server (default). • Use Internet Explorer proxy server settings. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 19 - McAfee MSA09EMB1RAA | Product Guide - Page 20
Manually configure proxy server settings. NOTE: These proxy settings apply only to SiteAdvisor Enterprise Plus. They are not used by other security software products managed by ePolicy Orchestrator. Supported Downloads troubleshooting, but McAfee McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 21
users can remove SiteAdvisor Enterprise Plus. You might find this option useful in troubleshooting, but McAfee does not recommend its application. Task For option definitions, click ? in Control Panel Option tab. 5 Select Enable. 6 Click Save. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 21 - McAfee MSA09EMB1RAA | Product Guide - Page 22
to be less stringent for red and yellow sites when certain factors, such as email or downloads, are the cause for a site's red or yellow status. • For each yellow, red or warning file downloads based on ratings Blocking phishing pages 22 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 23
action to either Allow or Warn. 6 Repeat step 5 for yellow sites. 7 Click Save. Blocking or warning file downloads based on ratings A site with an overall rating of green can contain individual download files rated yellow or red. To protect users, specify an action that is specific to the rating for - McAfee MSA09EMB1RAA | Product Guide - Page 24
click Edit. 4 Click the Site Resources tab. 5 For File download rating actions, select an action for yellow, red, and unrated related to job performance or do not conform to company security standards. An Authorize list contains a list of URLs or McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 25
do not match the path component of the site pattern: • /download/news • /user/downloads/applications/setup.exe • http://acme.com.tk NOTE: Use the "." character at the beginning of any site pattern to match a specific domain. This character McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 25 - McAfee MSA09EMB1RAA | Product Guide - Page 26
• http://info.site.com:8443/news/pages/logo.gif .acme.com:9090/downloads The domain is .acme.com:9090 and the path is /downloads. The URL string that matches this pattern must have a domain that ends B into the Authorize list for Group C. 26 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 27
list Blocking exploits on authorized sites Blocking or warning file downloads on authorized sites Blocking phishing pages on authorized sites Turning Systems | Policy Catalog. • ePolicy Orchestrator 4.5 - Click Menu | Policy | Policy Catalog. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 27 - McAfee MSA09EMB1RAA | Product Guide - Page 28
Sites tab, select the checkbox next to each site you want to edit, then click Edit. 5 Modify the site patterns or comments as needed. 28 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 29
no site patterns are displayed, the Authorize list does ensure access to the URL you entered. 5 To clear the test criteria and results, click Clear. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 29 - McAfee MSA09EMB1RAA | Product Guide - Page 30
the policy you want to edit, click Edit. 4 On the Advanced Options tab, select Track events and request information from the SiteAdvisor server. 5 For File downloads, select an action for yellow, red, and unrated files. 6 Click Save. 30 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 31
click Edit. 4 Click the Advanced Options tab. 5 Deselect Track events and request information from the SiteAdvisor server. This effectively also disables phishing page blocking and download rating actions for sites on the list. 6 Click Save. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 31 - McAfee MSA09EMB1RAA | Product Guide - Page 32
a time to a Prohibit list. Task For option definitions, click ? in the interface. 1 Do one of the following: • ePolicy Orchestrator 4.0 - Go to Systems | Policy Catalog. 32 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 33
want to edit, click Edit. 4 On the Manage Prohibited Sites tab, select the checkbox next to each site you want to delete from the list. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 33 - McAfee MSA09EMB1RAA | Product Guide - Page 34
. When Prohibit List is implemented as a multiple-instance policy, this is useful for testing the resulting effective policy (see How multiple-instance policies work). 34 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 35
yellow, or green. • Warn or block pages Short message to display when users attempt to download • Safety balloons files or access blocked phishing pages. • Warn or block pages Short message to the site's rating. This message appears on: McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 35 - McAfee MSA09EMB1RAA | Product Guide - Page 36
, click Edit. 4 Click the Site Resources tab. 5 Select a language. 6 Under Block message (for phishing page), type a message of up to 50 characters. 7 Click Save. 36 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 37
associated with their rating. You can explain why users should be cautious. Blocked download files. You can explain why the file is blocked. 7 Click Save. Creating Edit. 4 Click the Authorize and Prohibit Lists tab. 5 Select a language. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 37 - McAfee MSA09EMB1RAA | Product Guide - Page 38
In general, McAfee does not recommend disabling the client software. However, it might be useful when performing tests or troubleshooting network connection problems. Be sure • ePolicy Orchestrator 4.5 - Click Menu | Policy | Policy Catalog. 38 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 39
local intranet network resource that a server at a particular IP address serves up. A server or single IP address can have several domains; for example, • example.com McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 39 - McAfee MSA09EMB1RAA | Product Guide - Page 40
the tracking of visits to domains and domain resources such as downloads. Information on the domains visited and the files downloaded from the domains are sent to the ePO database for queries 3 For the policy you want to edit, click Edit. 40 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 41
accessed from a single domain. Information on the domain's pages that are visited and the files downloaded are sent to the Web Reporter database for queries and reports. By default, no visits to categories of all green sites, use this option. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 41 - McAfee MSA09EMB1RAA | Product Guide - Page 42
list, select SiteAdvisor Enterprise Plus 3.0.0; from the Category list, select Event Tracking. 3 For the policy you want to edit, click Edit. 4 For Domains and downloads, select Track content categories for all green sites. 5 Click Save. 42 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 43
security, use the ePolicy Orchestrator dashboard, monitor, and query features. SiteAdvisor Enterprise Plus provides a number of predefined queries and monitors that create reports on the sites and download attempted to visit most frequently. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 43 - McAfee MSA09EMB1RAA | Product Guide - Page 44
most frequently that were blocked because of a Prohibit List policy. List of 100 most frequently downloaded files rated red over the last 30 days. List of 100 red sites visited most frequently . The query results page shows you the details. 44 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 45
Green Sites on Prohibit List • Top 100 Red Sites on Prohibit List Summary • Top 100 Visits by Rating • Top 100 Visits by Action • Top 100 Downloads by Rating • Top 100 Downloads by Action McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 45 - McAfee MSA09EMB1RAA | Product Guide - Page 46
Make Active dialog box, click Yes. You can add only active dashboards to the Dashboard page. 11 In the Manage Dashboards page, click Close. 46 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 47
hide browsing activity, including: • Using an unsupported browser. SiteAdvisor Enterprise Plus supports Microsoft Internet Explorer and Mozilla Firefox. • Creating an application that browses the , Monitors, and Reports for more information. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 47 - McAfee MSA09EMB1RAA | Product Guide - Page 48
the MD5 algorithm for each application the system requests to download. It also sends information about the version of the being rated for security. (For example, if a managed system visited 10 different pages on the www.mcafee.com website over McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 49
cannot connect to the Internet. To resolve this problem, configure your proxy settings in Internet Explorer or site being rated for security. (For example, if a managed system visited 10 different pages on the www.mcafee.com website over the . McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 49 - McAfee MSA09EMB1RAA | Product Guide - Page 50
security security support mcafee.com/SupportSite/supportcentral/supportcentral.do?id=m1 To view a complete listing of the ePolicy Orchestrator documentation available for download McAfee online forums: • http://forums.mcafeehelp.com • http://mcafee McAfee to test. • Submit the URL for - McAfee MSA09EMB1RAA | Product Guide - Page 51
for a site are returned in addition to SiteAdvisor's usual security ratings, and the settings in the Content Actions policy to Tracking policy: • Track website pages viewed and files downloaded (for public or private domains) • Track allowed McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 51 - McAfee MSA09EMB1RAA | Product Guide - Page 52
to the Web to protect against liability exposure, productivity loss, bandwidth overload, and security threats. The Web Reporter server collects and processes log files and imports the data . Web Reporter collects and processes the log files 52 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 53
log source, and reports are generated using the data. Supported external database platforms include Microsoft SQL 2000 and 2005, MySQL secure SiteAdvisor Enterprise Plus database and sends Web Reporter logs on page view and file downloads to McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 53 - McAfee MSA09EMB1RAA | Product Guide - Page 54
the database • Defining directories • Configuring log sources • Customizing a log format • Setting up email delivery • Managing login accounts • Configuring options • Optimizing performance • Maintenance • Running reports 54 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 55
, SiteAdvisor Enterprise Plus customizing 35 downloads 37 phishing pages 36 Mozilla Firefox SiteAdvisor Enterprise Plus and 5 supported browsers on SiteAdvisor Enterprise Plus 5 multiple-instance policies SiteAdvisor Enterprise Plus 11, 26 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 55 - McAfee MSA09EMB1RAA | Product Guide - Page 56
settings supported downloads 37 monitors for browser activity 46 resolving a rating dispute 47 tracking Internet usage 15, 47 troubleshooting communication error 7 website 50 SiteAdvisor menu description of 7 disabled 38 displaying options 8 56 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide - McAfee MSA09EMB1RAA | Product Guide - Page 57
or warn 23 websites browsing protection 7 McAfee ServicePortal 50 rated, customized messages for 35 search protection 6 SiteAdvisor Enterprise Plus support 50 SiteAdvisor support 50 testing for safety 6 viewing SiteAdvisor safety reports 10 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 57 - McAfee MSA09EMB1RAA | Product Guide - Page 58
Index 58 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
 |
 |
McAfee SiteAdvisor Enterprise Plus 3.0
Product Guide