McAfee MSA09EMB1RAA Product Guide - Page 31

Blocking phishing s on authorized sites, Turning off tracking for visits to authorized sites

Page 31 highlights

Configuring Policies Use Authorize and Prohibit lists for sites Blocking phishing pages on authorized sites An authorized site can contain phishing pages. To protect users, use this task to block access to these pages. NOTE: Use the Enforcement Messaging policy options to customize the message that is displayed to users. Task For option definitions, click ? in the interface. 1 Do one of the following: • ePolicy Orchestrator 4.0 - Go to Systems | Policy Catalog. • ePolicy Orchestrator 4.5 - Click Menu | Policy | Policy Catalog. 2 From the Product list, select SiteAdvisor Enterprise Plus 3.0.0; from the Category list, select Authorize List. 3 For the policy you want to edit, click Edit. 4 On the Advanced Options tab, select Track events and request information from the SiteAdvisor server. 5 For Phishing, select Block phishing pages. 6 Click Save. Turning off tracking for visits to authorized sites Use this task to turn off the tracking feature for sites in an Authorize list. When you do this, events for sites and site resources are no longer collected, and site information from the SiteAdvisor server is not requested. Phishing page blocking and download rating actions are also disabled only when this option is disabled. McAfee recommends using this procedure to prevent private information about intranet sites from being sent to the SiteAdvisor website's servers. It also reduces the amount of data returned by certain reports because visits to authorized sites are not reported. NOTE: The SiteAdvisor menu button appears gray when visiting sites that are not being tracked. This setting takes precedence over the one in the Event Tracking policy. Task For option definitions, click ? in the interface. 1 Do one of the following: • ePolicy Orchestrator 4.0 - Go to Systems | Policy Catalog. • ePolicy Orchestrator 4.5 - Click Menu | Policy | Policy Catalog. 2 From the Product list, select SiteAdvisor Enterprise Plus 3.0.0; from the Category list, select Authorize List. 3 For the policy you want to edit, click Edit. 4 Click the Advanced Options tab. 5 Deselect Track events and request information from the SiteAdvisor server. This effectively also disables phishing page blocking and download rating actions for sites on the list. 6 Click Save. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58

Blocking phishing pages on authorized sites
An authorized site can contain phishing pages. To protect users, use this task to block access
to these pages.
NOTE:
Use the Enforcement Messaging policy options to customize the message that is displayed
to users.
Task
For option definitions, click
?
in the interface.
1
Do one of the following:
ePolicy Orchestrator 4.0 — Go to
Systems | Policy Catalog
.
ePolicy Orchestrator 4.5 — Click
Menu | Policy | Policy Catalog
.
2
From the
Product
list, select
SiteAdvisor Enterprise Plus 3.0.0
; from the
Category
list, select
Authorize List
.
3
For the policy you want to edit, click
Edit
.
4
On the
Advanced Options
tab, select
Track events and request information from
the SiteAdvisor server
.
5
For
Phishing
, select
Block phishing pages
.
6
Click
Save
.
Turning off tracking for visits to authorized sites
Use this task to turn off the tracking feature for sites in an Authorize list. When you do this,
events for sites and site resources are no longer collected, and site information from the
SiteAdvisor server is not requested. Phishing page blocking and download rating actions are
also disabled only when this option is disabled.
McAfee recommends using this procedure to prevent private information about intranet sites
from being sent to the SiteAdvisor website’s servers. It also reduces the amount of data returned
by certain reports because visits to authorized sites are not reported.
NOTE:
The SiteAdvisor menu button appears gray when visiting sites that are not being tracked.
This setting takes precedence over the one in the Event Tracking policy.
Task
For option definitions, click
?
in the interface.
1
Do one of the following:
ePolicy Orchestrator 4.0 — Go to
Systems | Policy Catalog
.
ePolicy Orchestrator 4.5 — Click
Menu | Policy | Policy Catalog
.
2
From the
Product
list, select
SiteAdvisor Enterprise Plus 3.0.0
; from the
Category
list, select
Authorize List
.
3
For the policy you want to edit, click
Edit
.
4
Click the
Advanced Options
tab.
5
Deselect
Track events and request information from the SiteAdvisor server
. This
effectively also disables phishing page blocking and download rating actions for sites on
the list.
6
Click
Save
.
Configuring Policies
Use Authorize and Prohibit lists for sites
31
McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide