McAfee MSA09EMB1RAA Product Guide - Page 53

and then imports the data into its database. A log source can be a directory on the Web

Reporter report server, an FTP Server, or NetCache.

•

Database

— The database stores data from each log source, and reports are generated

using the data. Supported external database platforms include Microsoft SQL 2000 and 2005,

MySQL 5.0, and Oracle 9 and 10.

Sending Web Reporter logs

The Web Reporter server needs to collect and process log files of browsing data. After the log

file data is transferred to the database, reports can be generated. To get the log files to the

Web Reporter server, you must run an ePO server client task. Use this task to set up the client

task to run on managed systems.

When the task takes place, SiteAdvisor Enterprise Plus sends any and all Web Reporter data to

the Web Reporter configured in the Event Tracking policy. SiteAdvisor Enterprise Plus collects

all data logs from the secure SiteAdvisor Enterprise Plus database and sends Web Reporter logs

on page view and file downloads to the appropriate Web Reporter server, based on user- or

system-based policy.

NOTE:

Because of the amount of data that can be transferred when the logs are sent, setting

the client task to run on a randomized schedule is highly recommended.

Before you begin

The client task to send Web Reporter logs is available only after the Web Filtering for Endpoint

extension has been installed. Also, the settings in the Event Tracking policy for access to the

Web Reporter server must be in place.

Task

For option definitions, click

?

in the interface.

1

Do one of the following:

•

ePolicy Orchestrator 4.0 — Go to

Systems | System Tree

.

•

ePolicy Orchestrator 4.5 — Click

Menu | Systems | System Tree

.

2

On the Client Tasks tab, click

New Task

.

3

Name the task, and from the Type menu select

Send Web Reporter Logs (Web Filtering

for Endpoint)

.

4

Click

Next

, then click

Next

again.

5

On the Schedule page set the schedule for the task. Select

Enable Randomization

and

set the randomization period.

6

Click

Next

, then click

Save

.

Applying the Content Actions policy

Use this task to find and set the action for any site content category. You can sort by functional

group, risk group, or action; or filter by a specific item. By default, all content categories are

set to Allow.

Web Filtering for Endpoint and Web Reporter Appendix

Sending Web Reporter logs

53

McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide

Section	Page
Contents	3
Introducing SiteAdvisor Enterprise Plus	5
Benefits of using SiteAdvisor Enterprise Plus	5
How safety ratings are compiled	6
Safety icons and balloons protect during searches	6
Using site safety balloons	7
SiteAdvisor menu protects while browsing	7
Using the SiteAdvisor menu	8
Safety reports provide details	9
Viewing safety reports	10
Administrators customize policy settings	11
Setting up a Browsing Security Strategy	13
Guidelines for creating a strategy	13
Select the right policy options and features	14
Information that SiteAdvisor Enterprise Plus sends	15
Configuring Policies	16
How policies work	16
Types of policy categories	17
Default policy settings	17
Creating and editing policies	19
Apply general options	19
Configuring proxy settings	20
Enabling observe mode	21
Setting the control panel option	21
Block and warn sites by ratings and threat factors	22
Configuring access based on ratings	22
Blocking or warning site access based on ratings	23
Blocking or warning site access based on threat factors	23
Blocking or warning file downloads based on ratings	23
Blocking phishing pages	24
Use Authorize and Prohibit lists for sites	24
How site patterns work	25
How multiple-instance policies work	26
Working with Authorize lists	27
Adding a site to an Authorize list	27
Adding multiple sites to an Authorize list	27
Deleting sites from an Authorize list	28
Editing information in an Authorize list	28
Searching an Authorize list	29
Testing an Authorize list	29
Blocking exploits on authorized sites	30
Blocking or warning file downloads on authorized sites	30
Blocking phishing pages on authorized sites	31
Turning off tracking for visits to authorized sites	31
Setting list precedence	32
Working with Prohibit lists	32
Adding a site to a Prohibit list	32
Adding multiple sites to a Prohibit list	33
Deleting sites from a Prohibit list	33
Editing information in a Prohibit list	34
Searching a Prohibit list	34
Testing a Prohibit list	34
Customize messages for users	35
Creating customized messaging	35
Creating a message for rated sites	35
Creating a message for phishing pages	36
Creating a message for downloads	37
Creating a message for sites on Authorize or Prohibit lists	37
Adding a logo in a message	38
Disable and reenable the software	38
Disabling and re-enabling from the ePO server	38
Disabling and reenabling from the browser	39
Track events for reports	39
Tracking visits to domains and downloads	40
Tracking domain page views and downloads	41
Tracking green site content categories	41
Using Dashboards, Monitors, and Reports	43
Use queries to create reports	43
Creating reports	44
Running a purge task	45
Use dashboards and monitors	45
Creating monitors	46
Reference	47
Frequently Asked Questions	47
Where to find more information	50
Web Filtering for Endpoint and Web Reporter Appendix	51
How web content filtering works	51
Policy additions with web content filtering	51
Report and dashboard additions with web content filtering	52
How Web Reporter works	52
Sending Web Reporter logs	53
Applying the Content Actions policy	53
Working with the Web Reporter	54

McAfee MSA09EMB1RAA Product Guide - Page 53

Sending Web Reporter logs, Applying the Content Actions policy

Page 53 highlights