McAfee TSA00M005PAA Processor Guide - Page 80

Using Virus and Spyware Protection Best practices (virus and spyware protection) Best practices (virus and spyware protection) To develop an effective strategy for guarding against virus and spyware threats, we recommend that you proactively track the types of threats being detected on your network and where they are occurring. 1 Check your status emails or the SecurityCenter website for an overview of your account's status. • E nsure that computers in your account are up-to-date. • E nsure that protection is installed on all computers. 2 Check the Detections report regularly to see what is being detected. 3 Check the Unrecognized Programs report frequently to monitor the programs that users are approving on client computers. If you know some of the programs are safe and do not want them to be detected as potentially unwanted, add them to policies as approved programs. 4 To centralize management and more easily monitor the types of programs allowed on client computers, define client security settings in a policy. 5 If particular types of detections are occurring frequently or certain computers appear vulnerable, update the policy to resolve these issues. • S chedule scans or add exclusions. • E nable advanced scanning options. • E nsure that spyware protection is enabled. • F or maximum protection, set your spyware protection mode to Protect to automatically clean potentially unwanted programs. NOTE: Protect mode is not the default setting. For maximum protection, create a policy that includes Protect mode. • Enable all advanced spyware options. 6 Use "learn" mode to identify which programs to add to the Approved Programs list. This ensures that no required programs are deleted before you have the opportunity to authorize their use. Then change your spyware protection mode to Protect. 7 View the Detection History report periodically to discover trends specific to your network, and verify your strategy's success in reducing detections. Frequently asked questions This section includes questions asked by administrators that are related to using policy options for virus and spyware protection. How can I prevent popup prompts from appearing when unrecognized programs are detected? Virus and spyware protection prompts users for a response to a potentially unwanted program detection when set to Prompt mode. To prevent popups, select Protect or Report mode. For highest protection, select Protect to automatically delete unrecognized programs. Why would I want to specify excluded files and folders or approved programs? Specifying excluded files and folders from scanning can be useful if you know a particular type of file is not vulnerable to attack, or a particular folder is safe. If you use a program to 80 McAfee Total Protection Service Product Guide