McAfee TSA00M005PAA Processor Guide

McAfee TSA00M005PAA - Total Protection Service Manual

McAfee TSA00M005PAA manual content summary:

  • McAfee TSA00M005PAA | Processor Guide - Page 1
    McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 2
    NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. License Attributions Refer to the product Release Notes. 2 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 3
    what users see...27 Uninstalling the client software...27 Frequently asked questions...28 Error messages...28 Using the SecurityCenter 30 The SecurityCenter...30 Logging on to the SecurityCenter 31 Accessing data on SecurityCenter pages 32 McAfee Total Protection Service Product Guide 3
  • McAfee TSA00M005PAA | Processor Guide - Page 4
    45 Management of security policies...46 McAfee Default policy...47 Working with policies...51 Generation of security reports...51 Scheduling and moving licenses 62 Using Virus and Spyware Protection 63 How detections are handled...64 4 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 5
    Protection 82 Connection type and detections of incoming communications 83 Custom connections...83 Firewall protection mode and detections of unknown applications 85 Use learn mode to discover Internet applications 86 The role of IP addresses...86 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 6
    details...105 Viewing safety reports...107 Information that browser protection sends to McAfee 107 Installing browser protection during policy updates 108 Web filtering features...108 Enabling and disabling browser protection via policy 108 6 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 7
    a scan...130 Scheduling scans for devices...131 How detections are reported ...131 Viewing scan results...132 Viewing results for audit scans...132 Viewing results for DNS discovery on domains 133 Viewing results for network discovery scans 133 McAfee Total Protection Service Product Guide 7
  • McAfee TSA00M005PAA | Processor Guide - Page 8
    the product and its features. Contents How Total Protection Service works Types of protection Core product strengths New features for this release The role of the client software Updates to the client software Management with the SecurityCenter 8 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 9
    Security Center, where you can access reports that detail the status of client computers and use tools for customizing and managing security. Types of protection The core features in Total Protection Service safeguard against a broad range of threats. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 10
    information about threats and outbreaks as soon as they are discovered by McAfee Avert® Labs, a research division of McAfee. Whenever Avert Labs releases an outbreak detection definition (DAT) file, computers on your account receives it promptly. 10 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 11
    to security by: 1 Silently monitoring all file input and output, downloads, program executions, inbound and outbound communications, and other system-related activities on client computers. As a result of this monitoring, the client software automatically: McAfee Total Protection Service Product
  • McAfee TSA00M005PAA | Processor Guide - Page 12
    website and used in administrative reports. At the same time, the client software sends information about its detections and protection status, to update the security data maintained on the SecurityCenter website and used in administrative reports. 12 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 13
    . In addition, users can check for updates manually at any time by clicking the Total Protection Service icon in the system workgroup to share downloaded files, which controls Internet traffic and minimizes expensive downloads. 3 Internet Independent McAfee Total Protection Service Product Guide 13
  • McAfee TSA00M005PAA | Processor Guide - Page 14
    connection downloads updates directly from the update site through the relay server. You can specify which computers function as relay servers when you install the client software or at a later time. See the installation guide for more information. 14 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 15
    . These include reports on protection coverage (such as computers where protection is installed and enabled) and activity (such as the number of detections, emails, and website visits). The type, size, and placement of widgets can be customized. McAfee Total Protection Service Product Guide 15
  • McAfee TSA00M005PAA | Processor Guide - Page 16
    SecurityCenter website. The following example shows how an administrator might configure policies for client computers in three different groups. You should configure policies for your users to meet your own company's needs. 16 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 17
    client software operates on client computers. Policy management allows you to assign different levels and types of protection to different users. If you have created groups, you can assign a unique policy to each group or one policy to all groups. McAfee Total Protection Service Product Guide 17
  • McAfee TSA00M005PAA | Processor Guide - Page 18
    the security status for the Sales Team group in reports on the SecurityCenter. 6 The administrator adjusts the Sales policy. The modified policy is downloaded automatically to client computers in the Sales Team group the next time they check for updates. 18 McAfee Total Protection Service
  • McAfee TSA00M005PAA | Processor Guide - Page 19
    security status to the SecurityCenter. This information includes the number and type of detections, the functional status of the client software, and any applications or communications that were approved by users persons as an email attachment. McAfee Total Protection Service Product Guide 19
  • McAfee TSA00M005PAA | Processor Guide - Page 20
    example, when downloads are occurring) and perform manual updates. • Icon and protection status summary, which allows access to a limited set of features. • Icon and full console, which allows access to all features. This is the default setting. 20 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 21
    log off your computer. One of these conditions exists: • Your Total Protection Service subscription is expired. Renew it or contact your administrator. • Your pre-installed or trial subscription is not activated. • Firewall protection is disabled. McAfee Total Protection Service Product Guide 21
  • McAfee TSA00M005PAA | Processor Guide - Page 22
    without Internet access can retrieve updates through relay servers. In addition, users can perform on-demand (manual) updates at any time, and you can configure optional policy settings for updating tasks. Client software is updated in these ways. 22 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 23
    McAfee might send an EXTRA.DAT file with instructions for manually installing it. For maximum protection, configure your policies to check for an outbreak DAT file every hour. This feature is enabled by default. Updates when no user is logged on In most scenarios, Total Protection Service supports
  • McAfee TSA00M005PAA | Processor Guide - Page 24
    manually redisplay their icons by clicking Start | Programs | McAfee | Managed Services | Total Protection Service. • D etection notifications are not displayed on the desktop of all computer users if the fast user switching feature is enabled. Specifying when computers check for updates For virus
  • McAfee TSA00M005PAA | Processor Guide - Page 25
    and spyware protection does not detect the virus or interrupt the download process. In this case, use Windows Explorer to delete the EICAR test file from the client computer, then reinstall Total Protection Service and test the new installation. McAfee Total Protection Service Product Guide 25
  • McAfee TSA00M005PAA | Processor Guide - Page 26
    to product components, such as the scanning engine, are scheduled to end or will end within 30 days. • W hen updates to detection definition (DAT) files have ended or will end within 30 days. Task For option definitions, click ? in the interface. 26 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 27
    , the setting for the Windows firewall is automatically restored to the setting that was in effect before Total Protection Service firewall protection was installed. If the Windows firewall was enabled then, it is re-enabled automatically now. McAfee Total Protection Service Product Guide 27
  • McAfee TSA00M005PAA | Processor Guide - Page 28
    • E mpty the Internet Explorer cache and adjust the security level settings to Medium or Medium-high. • E mpty the Internet Explorer cache. (See your browser's documentation for instructions.) • A djust your corporate firewall or proxy settings. 28 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 29
    you are using a pre-installed copy of Total Protection Service, your activated trial or your pre-installed subscription has expired. To activate, click the Total Protection Service icon in the system tray, then select Buy or Renew your subscription. McAfee Total Protection Service Product Guide 29
  • McAfee TSA00M005PAA | Processor Guide - Page 30
    a management console for monitoring the protection status of computers on your account and assessing their security needs. Administrative features are divided among eight pages: • D ashboard • C omputers • R eports • P olicies • M y Account 30 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 31
    in the login credentials email or weekly status email you received from your service provider. NOTE: Before typing your login credentials, you can access multimedia address: The email address that you used to sign up for Total Protection Service. McAfee Total Protection Service Product Guide 31
  • McAfee TSA00M005PAA | Processor Guide - Page 32
    the Go to page drop-down list. Select the checkbox for individual computers, or select the checkbox in the heading to select all computers. 32 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 33
    the button at the end of the text to display instructions for resolving the problem. • In a computer listing, click the name of protection portals by clicking a link (available only when your account includes email protection or vulnerability scanning). McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 34
    you want to display information. (Optional) 3 Do any of the following: To... View instructions to resolve an action item Do this... Click the button at the end of the text. Action items are security issues that need your immediate attention. 34 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 35
    interface. 1 Click the Dashboard tab. 2 Do any of the following: To... TVioe.w.. details about protection coverage View details about protection coverage McAfee Total Protection Service Product Guide Do this... DIno athwisid..g.et, click a color in the pie chart that shows Ithneaswtaitdugseto
  • McAfee TSA00M005PAA | Processor Guide - Page 36
    an email protection or vulnerability scanning widget. (Available only when your subscription includes these types of protection.) Remove and the number of Internet applications approved by its user. You can easily see which computers need your attention McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 37
    Search. NOTE: The computer search feature does not recognize wildcard characters, so type letters or numbers only. Site administrators can search the entire account; group McAfee Total Protection Service Product Guide 37
  • McAfee TSA00M005PAA | Processor Guide - Page 38
    policy options for Protect mode. Working with an individual computer Use this task to manage an individual computer on the Computer Details page. This page displays information about the computer, its service components, and its detections. 38 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 39
    helpful in larger organizations or companies that are widely distributed geographically. Placing similar computers into a single group enables you to view and manage security issues for the group separately from the other computers in your account. McAfee Total Protection Service Product Guide 39
  • McAfee TSA00M005PAA | Processor Guide - Page 40
    single group called Sales Team. Then you can configure special security settings for those computers to provide greater protection against threats in unsecured networks such as airports and hotels. a new name for the existing group, then click Save. 40 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 41
    Download. Importing Active Directory groups Use this task to import Active Directory groups from your network into the SecurityCenter. Before you begin You must download the Active Directory synchronization utility before you can perform this task. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 42
    Push Install utility, you select the Active Directory groups, the software to install, a policy to assign, and whether to scan the computer for threats when installation is complete. Click the help link ( ? ) in the utility for online assistance. 42 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 43
    . • O n the Utilities page, click the Active Directory Synchronization tab, then click Active Directory Structure to open a page showing the Active Directory tree for your account. McAfee Total Protection Service Product Guide 43
  • McAfee TSA00M005PAA | Processor Guide - Page 44
    rights than the site administrator. While the site administrator can access all security information for all client computers in the account, group administrators can access information only for client computers in the groups they are assigned to. 44 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 45
    interface. 1 Click the My Account tab. 2 Click the Group Administrators tab, then do any of the following: To... McAfee Total Protection SeArvdidceaPgrrooduupctaGdmuiidneistrator Do this... 1 In the Group Administrators section, select Add. 45 2 On the Manage Group Administrators page, select
  • McAfee TSA00M005PAA | Processor Guide - Page 46
    in the group, you can assign a policy with high security settings that will provide greater protection against threats in unsecured networks such as airports and hotels. have not created any policies, only the McAfee Default policy is displayed. 46 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 47
    running. Display support notifications on client computers Enabled: Notification dialog boxes warn client computer users when software upgrades and DAT file updates are being discontinued for their operating system. McAfee Total Protection Service Product Guide Option Scheduled Scan Settings 47
  • McAfee TSA00M005PAA | Processor Guide - Page 48
    to use a high percentage of CPU time. (Scans should be requested during non-peak hours, when users are not performing tasks on their computers.) Spyware Protection Settings Detect ... Enabled: Detect all types of spyware threats during scans. 48 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 49
    on all computers using this policy Access to Sites Access to Downloads Block phishing pages McAfee Total Protection Service Product Guide Enforcement Messaging Definition Disabled: Do not check whether browser protection is installed on computers checking for updates. (This option is available
  • McAfee TSA00M005PAA | Processor Guide - Page 50
    on all computers using Disabled: Do not disable browser protection on computers this policy using this policy. Allow users to enable or disable browser protection Disabled: Do not allow browser protection to be disabled at the client computer. 50 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 51
    the McAfee Default policy. Generation of security reports Whenever a client computer checks for updates, it also sends its scanning history, protection strategy. Only the reports available for the types of protection installed appear on this page. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 52
    computers attempted to access by content rating and category. Includes successful, warned, and blocked access attempts. (Available only when web filtering policy options are 52 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 53
    the SecurityCenter Generation of security reports Use this report... Email Protection Reports To view... enabled for versions of Total Protection Service that include the web . 5 Type a subject and a message for the email. 6 Click Save. McAfee Total Protection Service Product Guide 53
  • McAfee TSA00M005PAA | Processor Guide - Page 54
    Using the SecurityCenter Generation of security reports Adding your logo to reports To customize your reports, you can upload a logo that appears in the upper xEpxlpolroerreor roor nolnylythtohsoeserurnunninignga a seslelcetcetdedvevresriosino.n. 54 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 55
    Generation of security reports reports. Duplicate listings usually result when the Total Protection Service client software has been installed more than once on a single computer or when users install it on their new computers without uninstalling Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 56
    Managing your account Managing your account Use these tasks to manage your Total Protection Service account from the My Account page. Management tasks are divided among . • L anguage for account correspondence and notifications. 4 Click Save. 56 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 57
    appropriate for your account, based on the frequency with which you need to review detection information. By default, you receive status emails weekly. 4 Click Save of subscriptions that are no longer current Select View cancelled subscriptions. McAfee Total Protection Service Product Guide 57
  • McAfee TSA00M005PAA | Processor Guide - Page 58
    -based versions of the client software. Locate the license key on the CD label. See the installation guide for activation instructions. Task For option definitions, click ? in the interface. 1 On the My Account page, click the Accounts & Keys tab. 58 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 59
    Total Protection Service account. NOTE: Information on using the utilities related to installation is available in the installation guide, available from the Help page. Task For option definitions, click ? in the interface. 1 Click the Utilities tab. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 60
    submit a description of your problem to a product support representative. • Phone support - Displays a phone number and the grant number for your subscription. You will need to reference the grant number when you speak to a support representative. 60 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 61
    many users or much detection data and, therefore, cannot view some advanced reporting features. NOTE: Sample reports are available in all product languages. Select the language from the Global Sites pull-down list in the upper-right corner of the page. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 62
    my license number? No. The old computer is automatically subtracted from your total license count on the Total Protection Service accounting system, and the new one added, so that your license SecurityCenter. This usually takes about 20 minutes. 62 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 63
    and detections Types of scans Scanning on client computers Configuring scanning policy options Managing detections Reports for virus and spyware protection Best practices (virus and spyware protection) Frequently asked questions Error messages McAfee Total Protection Service Product Guide 63
  • McAfee TSA00M005PAA | Processor Guide - Page 64
    virus and spyware protection handles the detections Virus detections: Virus and spyware protection attempts to clean the file. If it can be cleaned, the user security, we recommend using Protect mode. Mode Behavior of virus and spyware protection 64 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 65
    detections; how frequently computers check for updates; and when scheduled scans occur. On-access (automatic) scans On-access scans are those that occur on client computers whenever users access files (for example, open a file or run a program). McAfee Total Protection Service Product Guide 65
  • McAfee TSA00M005PAA | Processor Guide - Page 66
    is installed, or the Windows folder: • S can all cookies. • S can all registry keys. NOTE: At the start of an on-demand scan, all previous detections of potentially unwanted programs are cleared from the Potentially Unwanted Program Viewer. 66 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 67
    . NOTE: At the start of an on-demand scan, all previous detections of potentially unwanted programs are cleared from the Potentially Unwanted Program Viewer. For on-access scans, previous detections remain in the Potentially Unwanted Program Viewer. McAfee Total Protection Service Product Guide 67
  • McAfee TSA00M005PAA | Processor Guide - Page 68
    the results of the scan. Scanning on demand from Windows Explorer Use this task to perform a manual scan from Microsoft Windows Explorer on a client computer. Task 1 In Windows Explorer, right-click any drive or folder, then select Scan Now. 68 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 69
    you begin Enter your administrator credentials by using the Admin Login feature on the client computer. Task 1 Click the Total Protection Service icon in the system tray, then select Open Console. 2 From the Action Menu, select Product Details. McAfee Total Protection Service Product Guide 69
  • McAfee TSA00M005PAA | Processor Guide - Page 70
    still detects viruses. Task For option definitions, click ? in the interface. 1 On the Policies page, click Add Policy (or click Edit to modify an existing policy). 2 Click Virus & Spyware Protection, then click the Advanced Settings tab. 70 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 71
    scanned for viruses. You can add files, folders, or file extensions to the list of exclusions or remove them from the list. Task For option definitions, click ? in the interface. 1 On the Policies page, click Add Policy (or click Edit to modify an existing policy). McAfee Total Protection Service
  • McAfee TSA00M005PAA | Processor Guide - Page 72
    scanning features. Task For option definitions, click ? in the interface. 1 On the Policies page, click Add Policy (or click Edit to modify an existing policy). 2 Click Virus & Spyware Protection additional options for the policy, then click Save.) 72 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 73
    cleaned; it was deleted instead. A copy was saved in a quarantine folder, in a proprietary binary format, where it can be accessed only with the Quarantine Viewer. McAfee Total Protection Service Product Guide 73
  • McAfee TSA00M005PAA | Processor Guide - Page 74
    Users with administrator rights can manage these items using the Quarantine Viewer. 5 Click Back to return to the console. Viewing quarantined files on client computers When virus and spyware protection as an administrator to access this task. 74 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 75
    one or more policies so they will not be detected as unrecognized programs on computers using the policies. Before you begin Users can approve applications only when spyware protection mode or firewall protection mode is configured as Prompt mode. McAfee Total Protection Service Product Guide 75
  • McAfee TSA00M005PAA | Processor Guide - Page 76
    the McAfee Avert Labs Threat Library. View details about a computer Click a computer name to display the Computer Details page, which displays where a detection occurred information about the computer, its service components, and its detections. 76 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 77
    Reports for virus and spyware protection View information about virus and protection and firewall protection. Allows you to approve programs from within the report. • D etection History report - Graphs detections on client computers over the past year. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 78
    Using Virus and Spyware Protection Reports for virus and spyware protection Detections report Use the Detections detection occurred information about the computer, its service components, and its detections. 78 McAfee Total Protection Service Product Guide Select this option... To do this...
  • McAfee TSA00M005PAA | Processor Guide - Page 79
    virus and spyware protection Unrecognized Programs report Use the Unrecognized Programs report to view a list of unapproved programs that spyware protection protection features have performed, and whether strategies you have implemented, such as user McAfee Total Protection Service Product Guide 79
  • McAfee TSA00M005PAA | Processor Guide - Page 80
    to specify excluded files and folders or approved programs? Specifying excluded files and folders from scanning can be useful if you know a particular type of file is not vulnerable to attack, or a particular folder is safe. If you use a program to 80 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 81
    the Total Protection Service console on the client computer. NOTE: To prevent this problem, force the computer to re-enable on-access scanning automatically whenever it checks for updates by enabling the associated virus and spyware policy option. McAfee Total Protection Service Product Guide 81
  • McAfee TSA00M005PAA | Processor Guide - Page 82
    Configuring policy options Configuring custom connections Installing and enabling firewall protection at the policy level Managing detections Reports for firewall protection Best practices (firewall protection) Frequently asked questions 82 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 83
    users who connect to both secured (trusted) and unsecured (untrusted) networks must be able to change their setting accordingly. A policy option specifies whether firewall protection originate. When you set up a custom connection, you can designate: McAfee Total Protection Service Product Guide 83
  • McAfee TSA00M005PAA | Processor Guide - Page 84
    want to configure a custom connection. NOTE: Custom settings configured on the SecurityCenter are ignored on client computers if firewall protection mode is set to Prompt. In Prompt mode, settings configured by users override administrator settings. 84 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 85
    .. NOTE: If the policy is changed from Prompt mode to Protect mode or Report mode, firewall protection saves user settings for allowed applications. If the policy is then changed back to Prompt mode, these settings are reinstated. McAfee Total Protection Service Product Guide 85
  • McAfee TSA00M005PAA | Processor Guide - Page 86
    port for a system service. • D isable or remove a port for a system service. NOTE: Select a port for system services only if you are certain it must be open. You will rarely need to open a port. We recommend that you disable unused system services. 86 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 87
    that could cause harm. There are two methods of establishing firewall protection: • T he administrator configures firewall settings in a Total Protection Service policy. • E ach client computer user configures firewall settings for their computer. McAfee Total Protection Service Product Guide 87
  • McAfee TSA00M005PAA | Processor Guide - Page 88
    the means for you to ensure the highest level of security. You can also allow users to configure their own firewall protection settings. In this case, no other firewall policy options are available for you to select. This is the default setting. 88 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 89
    protection: • W ho configures the firewall • C onnection type NOTE: To ensure the highest level of security, we recommend that administrators configure firewall settings. If you allow users Firewall Protection, then click the General Settings tab. McAfee Total Protection Service Product Guide 89
  • McAfee TSA00M005PAA | Processor Guide - Page 90
    protection checks the list of Internet applications that McAfee has determined to be safe at the www.hackerwatch.org website. • W hether firewall protection blocks an unrecognized application, prompts users options for the policy, then click Save.) 90 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 91
    ? in the interface. 1 On the Policies page, click Add Policy (or click Edit to modify an existing policy). 2 Select Firewall Protection, then click the General Settings tab. 3 Under Connection Type, select Custom settings, then click edit. ▲▲ McAfee Total Protection Service Product Guide 91
  • McAfee TSA00M005PAA | Processor Guide - Page 92
    click Edit to modify an existing policy). 2 Select Firewall Protection, then click the General Settings tab. 3 Under Connection Type, select Custom settings, then click edit. 92 McAfee Total Protection Service Product Guide To do this... Perform these steps... Accept communications from any
  • McAfee TSA00M005PAA | Processor Guide - Page 93
    firewall protection at the policy level Use these tasks to install or enable firewall protection automatically for all computers using the policy. Tasks Installing firewall protection during policy updates Enabling and disabling firewall protection ▲▲ McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 94
    modify an existing policy). 2 S elect Firewall Protection, then click the General Settings tab. 3 U nder Firewall Status, select On or Off. 4 C lick Save. (For a new policy, click Next, select additional options for the policy, then click Save.) 94 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 95
    and applications Use this task to see which applications users have approved to run on their computers. You can also add the applications to one or more policies so they will not be detected as unrecognized programs on computers using the policies. McAfee Total Protection Service Product Guide 95
  • McAfee TSA00M005PAA | Processor Guide - Page 96
    In the Computer Details page, under Detections, click a number in the User-Approved Applications column to view applications. 2 To add the application to one or information about the computer, its service components, and its detections. 96 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 97
    that are not recognized by virus and spyware protection and firewall protection. Allows you to approve Internet protection prevented from reaching client computers. For the purposes of this report, each attempt to communicate is called an event. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 98
    detected as threats, add them to policies. 5 If you want to monitor the inbound communications that firewall protection has blocked, select the Report blocked events policy option, then check the Inbound Events Blocked by Firewall report regularly. 98 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 99
    firewall protection is enabled. • C arefully specify the environment where client computers are used. For users with McAfee Default policy settings. Specify a name for the new policy, save it, and then add allowed Internet applications as needed. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 100
    enabled firewall protection, why was Internet Explorer no longer blocked? Firewall protection uses Internet Explorer to update product components. Whenever you enable firewall protection, Internet Explorer is given full access to check for updates. 100 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 101
    test results and feedback submitted by users and site owners. The web filtering module, available with some versions of Total Protection Service, provides features for regulating access the color that matches the safety rating for the current site. McAfee Total Protection Service Product Guide 101
  • McAfee TSA00M005PAA | Processor Guide - Page 102
    the site. • F eedback submitted by site users, which might include reports of phishing scams, bad shopping experiences, and selling services that can be obtained without cost from other sources. • A dditional analysis by McAfee professionals. 102 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 103
    ratings information. Communication problems are indicated by a gray SiteAdvisor menu button with disconnected cables. Before you begin Be sure that the option for showing safety balloons is enabled. This option is available on the SiteAdvisor menu. McAfee Total Protection Service Product Guide 103
  • McAfee TSA00M005PAA | Processor Guide - Page 104
    the View | Toolbars | McAfee SiteAdvisor menu option. This does not affect the functional status (enabled or disabled) of the browser protection client software. NOTE: Firefox users cannot hide the menu button while browser protection is enabled. 104 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 105
    and include feedback submitted by site owners and users. Safety reports for sites are delivered from the McAfee SiteAdvisor server and provide the following information: .rom our volunteer reviewers and alert you to small business sites that McAfee Total Protection Service Product Guide 105
  • McAfee TSA00M005PAA | Processor Guide - Page 106
    our best to promptly correct it. We don't allow sites to pay to be rated or to change or improve their ratings. What our volunteer reviewers have to say about this website. These comments are posted unedited. 106 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 107
    for security. The focus of browser protection is protecting your client computers; no attempt is made to track personal Internet usage. NOTE: Browser protection does not send information on your company's intranet site to the SiteAdvisor servers. McAfee Total Protection Service Product Guide 107
  • McAfee TSA00M005PAA | Processor Guide - Page 108
    protection via policy Use this task to enable and disable the browser protection service on all client computers using the policy. This feature is available only in versions of the browser protection service that include the web filtering module. 108 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 109
    the browser protection service to determine whether users can access a site or resources on a site, such as download files. • download file, specify whether to allow, warn, or block the download. This enables a greater level of granularity in protecting McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 110
    : To ensure users can access specific sites that are important to your business, no matter how they are rated, add them to the Exceptions list as an authorized site. For authorized sites, the browser protection service ignores the safety rating. 110 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 111
    a warning when users attempt to download a file with the specified rating. • A llow - Allow downloads of files with the specified rating. 4 Click Save. (For a new policy, click Next, select additional options for the policy, then click Save.) McAfee Total Protection Service Product Guide 111
  • McAfee TSA00M005PAA | Processor Guide - Page 112
    To protect users, use this web filtering task to block access to these pages. This feature is available only with versions of the browser protection service that with versions of the browser protection service that include the web filtering module. 112 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 113
    access to sites that are important to your business. • P rohibited sites that users are never allowed to access. Add prohibited sites to block access to sites that are not related to job performance or do not conform to company security standards. McAfee Total Protection Service Product Guide 113
  • McAfee TSA00M005PAA | Processor Guide - Page 114
    , and they do not accept wildcard characters. The browser protection service does not check for matches in the middle or end of URLs. 114 McAfee Total Protection Service Product Guide Matches • http://www.info.mcafee.com • http://mcafee.com Does not match • http://www.mcafeeasap.com • http
  • McAfee TSA00M005PAA | Processor Guide - Page 115
    • /us/enterprise/products/security These paths do not match: • /emea/enterprise Using Browser Protectio•n /ainnfdo/Wuse/benFteiltreprriisneg Customizing messages for users Use the "." character at if you have created the message in that language. McAfee Total Protection Service Product Guide 115
  • McAfee TSA00M005PAA | Processor Guide - Page 116
    to the domain name to display the sites users domain attempted to access in the domain. View details service components, and its detections. See also Information that browser protection sends to McAfee on page 107 Web Filtering report on page 117 116 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 117
    to access a site you have blocked. 5 To ensure that all computers are protected against web-based threats, configure policy options to enable browser protection via policy and prevent users from disabling browser protection on their computers. McAfee Total Protection Service Product Guide 117
  • McAfee TSA00M005PAA | Processor Guide - Page 118
    users that are related to using the features of browser protection for browser protection to uniquely identify the site being rated for security. For example support in Total Protection Service is Troubleshooting to test the connection. 118 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 119
    -the-clock from hundreds of sources worldwide, ensuring its ability to detect the latest risks. • M eets the website security vulnerabilities audit requirements mandated by HIPAA, GRAMMLEACH-BILEY, SARBANES-OXLEY, and other federal legislation. McAfee Total Protection Service Product Guide 119
  • McAfee TSA00M005PAA | Processor Guide - Page 120
    Adds the McAfee SECURE trustmark to your website as proof that it meets the rigorous certification requirements for compliance with the McAfee SECURE data security standard. This program requires daily scanning of your McAfee SECURE devices. McAfee Total Protection Service Product Guide 120
  • McAfee TSA00M005PAA | Processor Guide - Page 121
    The portal provides tools for adding the IP addresses to scan, performing scans, checking scan results, and accessing historical data for scans. If you subscribe to a certification program, access tools and reports for certification on the portal. 121 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 122
    scans are required at specific intervals. Check the requirements for your subscription. 7 View results of the scans and suggested remediation tasks (if vulnerabilities were found). Optionally, generate customized reports and schedule remediation tasks. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 123
    running scans, you must add each device you want to scan to your account on the SaaS vulnerability scanning portal. If you are unsure of the IP addresses to add, you can add a domain name and run a discovery scan to identify the IP addresses. 123 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 124
    vulnerability scanning requirements of the Payment Card Industry (PCI) data security standard (DSS). Devices that process payment card information must be scanned and show compliance with this standard quarterly. Used for the PCI certification program. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 125
    remote user capabilities, but not remote administrator or root user capabilities the host, including security settings. These vulnerabilities , or monthly. Manual scans are available to test vulnerabilities identified in a previous scan that you have taken McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 126
    portal (click the link in the SaaS Vulnerability Scanning/PCI Certification widget on the Dashboard page of the SecurityCenter). 2 In the portal, click the Security tab to display the Security Dashboard page. 3 Under Discovery, select Networks. McAfee Total Protection Service Product Guide 126
  • McAfee TSA00M005PAA | Processor Guide - Page 127
    SECURE service level supports this option. Run scans once a month. The Devices McAfee SECURE service level supports this option. Have McAfee perform a scan for each device every three months. The Devices PCI service level supports this option. 127 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 128
    accessible from the SaaS vulnerability scanning portal). • S ign up for the RSS feed at http://www.mcafeesecure.com/help/ScanIps.rss. 2 Follow the instructions provided in the documentation for Group. 5 On the Device Groups page, click Add Group. McAfee Total Protection Service Product Guide 128
  • McAfee TSA00M005PAA | Processor Guide - Page 129
    the group. 8 Under Users With Access, repeat step scanning portal (click the link in the SaaS Vulnerability Scanning/PCI Certification widget on the Dashboard page of the SecurityCenter). 2 In the portal, click the Security tab to display the Security McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 130
    under the device listing to continue setting up that type of scan. 6 If you are configuring an audit, select the type of audit from the drop-down list. • H ack Simulation - Runs the standard device audit. • D enial of Service - Adds extra tests. McAfee Total Protection Service Product Guide 130
  • McAfee TSA00M005PAA | Processor Guide - Page 131
    you can view scan results, detailed patch recommendations applicable to your specific system configuration, historical audit data, and printable audit reports. To access scan results, click the Security tab to display the Security Dashboard page. 131 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 132
    Open the SaaS vulnerability scanning portal (click the link in the SaaS Vulnerability Scanning/PCI Certification widget on the Dashboard page of the SecurityCenter). 2 In the portal, click the Security tab to display the Security Dashboard page. McAfee Total Protection Service Product Guide 132
  • McAfee TSA00M005PAA | Processor Guide - Page 133
    Auditing. 6 On the Add Devices page, select options adding the devices for scanning. Viewing results for network discovery scans Use this task to view the discovery status for networks in your account and the results of discovery scans performed. 133 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 134
    about it. A listing of networks for which results of discovery scans are available. Select the type of report and the networks to report on, then click View to display a report comparing the results of the latest scan with the previous scan. McAfee Total Protection Service Product Guide 134
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134

McAfee Total Protection Service
Product Guide