McAfee MSA09EMB1RAA Product Guide - Page 15

Use this feature...

If this is your security or productivity goal...

Queries and monitors

Monitor the effect of current policy settings.

Functional Compliance query

Ensure that the correct version of the SiteAdvisor

Enterprise Plus client software is installed on all managed

systems and functions properly.

Content Actions policy with Web Filtering for Endpoint

extension

Use site content to control access to sites.

Web Reporter with Web Filtering for Endpoint extension

Obtain detailed reports based on site content.

See

Configuring Policies

for information about using the policy features. See

Using Dashboards,

Monitors, and Reports

for information about queries and monitors.

Information that SiteAdvisor Enterprise Plus sends

The client software sends the following information to the ePO server for use in queries:

•

Type of event initiated by the managed system (site visit or download).

•

Unique ID assigned by SiteAdvisor Enterprise Plus to the managed system.

•

Time of event.

•

Domain for event.

•

URL for event.

•

SiteAdvisor rating for the event’s site.

•

Site threat factor.

•

Whether the event’s site or site resource is on an Authorize list, a Prohibit list, or no list.

•

Reason for action (allow, warn, or block) taken by SiteAdvisor Enterprise Plus.

•

Observe mode status (on or off).

SiteAdvisor Enterprise Plus sends the following information to the SiteAdvisor website’s servers:

•

Version of the SiteAdvisor Enterprise Plus client software running on the managed system.

•

Version of the operating system running on the managed system.

•

Language and country locale selected for the operating system and browser running on the

managed system.

•

Host name and part of the URL for each website the managed system requests to access.

•

MD5 algorithm for each application the managed system requests to download.

When a managed system visits a website, SiteAdvisor Enterprise Plus tracks the site’s

domain

specifier

. The domain specifier is the smallest amount of information required for SiteAdvisor

Enterprise Plus to uniquely identify the site being rated for security. The focus of SiteAdvisor

Enterprise Plus is protecting your managed systems; no attempt is made to track personal

Internet usage.

NOTE:

SiteAdvisor Enterprise Plus does not send information on your company’s intranet sites

to the SiteAdvisor website’s servers, unless specifically requested. See

Tracking visits to domains

and downloads

under

Configuring Policies

for more information.

Setting up a Browsing Security Strategy

Information that SiteAdvisor Enterprise Plus sends

15

McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide

Section	Page
Contents	3
Introducing SiteAdvisor Enterprise Plus	5
Benefits of using SiteAdvisor Enterprise Plus	5
How safety ratings are compiled	6
Safety icons and balloons protect during searches	6
Using site safety balloons	7
SiteAdvisor menu protects while browsing	7
Using the SiteAdvisor menu	8
Safety reports provide details	9
Viewing safety reports	10
Administrators customize policy settings	11
Setting up a Browsing Security Strategy	13
Guidelines for creating a strategy	13
Select the right policy options and features	14
Information that SiteAdvisor Enterprise Plus sends	15
Configuring Policies	16
How policies work	16
Types of policy categories	17
Default policy settings	17
Creating and editing policies	19
Apply general options	19
Configuring proxy settings	20
Enabling observe mode	21
Setting the control panel option	21
Block and warn sites by ratings and threat factors	22
Configuring access based on ratings	22
Blocking or warning site access based on ratings	23
Blocking or warning site access based on threat factors	23
Blocking or warning file downloads based on ratings	23
Blocking phishing pages	24
Use Authorize and Prohibit lists for sites	24
How site patterns work	25
How multiple-instance policies work	26
Working with Authorize lists	27
Adding a site to an Authorize list	27
Adding multiple sites to an Authorize list	27
Deleting sites from an Authorize list	28
Editing information in an Authorize list	28
Searching an Authorize list	29
Testing an Authorize list	29
Blocking exploits on authorized sites	30
Blocking or warning file downloads on authorized sites	30
Blocking phishing pages on authorized sites	31
Turning off tracking for visits to authorized sites	31
Setting list precedence	32
Working with Prohibit lists	32
Adding a site to a Prohibit list	32
Adding multiple sites to a Prohibit list	33
Deleting sites from a Prohibit list	33
Editing information in a Prohibit list	34
Searching a Prohibit list	34
Testing a Prohibit list	34
Customize messages for users	35
Creating customized messaging	35
Creating a message for rated sites	35
Creating a message for phishing pages	36
Creating a message for downloads	37
Creating a message for sites on Authorize or Prohibit lists	37
Adding a logo in a message	38
Disable and reenable the software	38
Disabling and re-enabling from the ePO server	38
Disabling and reenabling from the browser	39
Track events for reports	39
Tracking visits to domains and downloads	40
Tracking domain page views and downloads	41
Tracking green site content categories	41
Using Dashboards, Monitors, and Reports	43
Use queries to create reports	43
Creating reports	44
Running a purge task	45
Use dashboards and monitors	45
Creating monitors	46
Reference	47
Frequently Asked Questions	47
Where to find more information	50
Web Filtering for Endpoint and Web Reporter Appendix	51
How web content filtering works	51
Policy additions with web content filtering	51
Report and dashboard additions with web content filtering	52
How Web Reporter works	52
Sending Web Reporter logs	53
Applying the Content Actions policy	53
Working with the Web Reporter	54

McAfee MSA09EMB1RAA Product Guide - Page 15

Information that SiteAdvisor Enterprise Plus sends

Page 15 highlights