McAfee TSA00M005PAA Processor Guide - Page 97

Unrecognized Programs report, Inbound Events Blocked by Firewall report

Page 97 highlights

Using Firewall Protection Reports for firewall protection Reports for firewall protection You can view information about firewall detections in administrative reports available from the SecurityCenter. Reports provide details about the specific threats detected over the past year. • U nrecognized Programs - Lists programs detected on client computers that are not recognized by virus and spyware protection and firewall protection. Allows you to approve Internet applications from within the report. • Inbound Events Blocked by Firewall - Lists the incoming communication attempts that firewall protection prevented client computers from receiving, where they originated, and to which computer they were sent. Unrecognized Programs report Use the Unrecognized Programs report to view a list of unapproved Internet applications that firewall protection detected on your network. This list is cumulative - previously detected programs remain in the list, and new detections are added each time you access the report. Select the information that appears in this report SSeelleecctt tthhiiss ooppttiioonn...... RReeppoorrtt ppeerriioodd DDeetteeccttiioonn ttyyppee VViieeww GGrroouuppss TToo ddoo tthhiiss...... SSoorrppeeooccnniieeffyyoottffhheetthhppeeeellrraaiioossttdd11oo22ff ttmmiimmooeennttffhhoossrr..wwhhiicchh ttoo ddiissppllaayy iinnffoorrmmaattiioonn.. SSeelleecctt ffrroomm tthhee llaasstt wweeeekk SpSpoohhttooeewwnnttaaiiaalllllllluuyynnuurreennccwwooaaggnnnnttiieezzddeeddpprrppoorrggoorrggaarrmmaammss,,ss,,oooorr nnoollnnyyllyypprrccooooggoorrkkaaiimmeessss.. bblloocckkeedd bbyy ffiirreewwaallll pprrootteeccttiioonn,, oonnllyy pdpdLLiireressootttteeggttccrrhhaatteeeemmddccss..oo,, mmoorrppuutthhtteeeerrggss rrwwoouuhhppeessrreeccoouunnnnttrraaeeiiccnnooiinnggggnniizzcceeooddmmpppprruuoottggeerrrraass mmwwsshheewwrreeeerreeuunnddrreeeettcceeooccggtteennddiizz,,eettddhheepprrnnooaaggmmrraaeemmoossffwwtthheeeerree DDiissppllaayy aallll tthhee ccoommppuutteerrss oonn yyoouurr aaccccoouunntt oorr oonnllyy tthhee ccoommppuutteerrss iinn aa ssiinnggllee ggrroouupp.. How to use this report When you want to... When you want to... Display computers or detections Display computers or detections View details about a computer Vwiheewredeatadielsteacbtioount oacccoumrrepduter where a detection occurred Allow an Internet application Allow an Internet application Do this... Do this... Click the triangle icon next to a name. Click the triangle icon next to a name. •• UUnnddeerr aa ccoommppuutteerr nnaammee,, sshhooww wwhhiicchh aapppplliiccaattiioonnss wweerree ddeetteecctteedd.. •• UUnnddeerr aann aapppplliiccaattiioonn nnaammee,, sshhooww tthhee ccoommppuutteerrss wwhheerree iitt wwaass ddeetteecctteedd.. Click a group name to display computers in that group. Click a group name to display computers in that group. Click a computer name to display the Computer Details page, which displays Cinlficokrmaactoiomnpaubtoeur tntahmeecotomdpiusptelar,yittsheseCrvoimcepucotemrpDoenteaniltssp, aagned, iwtshdicehtedcitsiponlasy.s information about the computer, its service components, and its detections. Click Allow, select one or more applications, select one or more policies where tChliicskaAppllloicwat,iosnelweciltl obneeaoprprmovoered,atphpelnicactliicoknsS,asveele.cTthoeneseolercmteodreapppolliiccaietisonwshweriell nthoisloanpgpelircabteiodnewteiclltebde aaspparothvreeda,ttbhyenfirceliwckalSl aprvoet.ecTthioensoelnecctoemdpauptpelricsautsioinngs wthiell nseolelocntegderpboelicdieest.ected as a threat by firewall protection on computers using the selected policies. Inbound Events Blocked by Firewall report Use the Inbound Events Blocked by Firewall report to view a list of communications that firewall protection prevented from reaching client computers. For the purposes of this report, each attempt to communicate is called an event. McAfee Total Protection Service Product Guide 97

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134

McAfee Total Protection Service Product Guide
97
Reports for firewall protection
You can view information about firewall detections in administrative reports available from the
SecurityCenter. Reports provide details about the specific threats detected over the past year.
Unrecognized Programs — Lists programs detected on client computers that are not
recognized by virus and spyware protection and firewall protection. Allows you to approve
Internet applications from within the report.
Inbound Events Blocked by Firewall — Lists the incoming communication attempts that
firewall protection prevented client computers from receiving, where they originated, and
to which computer they were sent.
Unrecognized Programs report
Use the Unrecognized Programs report to view a list of unapproved Internet applications that
firewall protection detected on your network. This list is cumulative — previously detected
programs remain in the list, and new detections are added each time you access the report.
Select the information that appears in this report
How to use this report
Inbound Events Blocked by Firewall report
Use the Inbound Events Blocked by Firewall report to view a list of communications that
firewall protection prevented from reaching client computers. For the purposes of this report,
each attempt to communicate is called an
event
.
To do this...
Select this option...
Specify the period of time for which to display information. Select from the last week
or one of the last 12 months.
Report period
Show all unrecognized programs, only programs blocked by firewall protection, only
potentially unwanted programs, or only cookies.
Detection type
List the computers where unrecognized programs were detected, the name of the
programs, or the groups containing computers where unrecognized programs were
detected.
View
Display all the computers on your account or only the computers in a single group.
Groups
Do this...
When you want to...
Click the triangle icon next to a name.
Display computers or detections
Under a computer name, show which applications were detected.
Under an application name, show the computers where it was detected.
Click a group name to display computers in that group.
Click a computer name to display the Computer Details page, which displays
information about the computer, its service components, and its detections.
View details about a computer
where a detection occurred
Click
Allow
, select one or more applications, select one or more policies where
this application will be approved, then click
Save
. The selected applications will
Allow an Internet application
no longer be detected as a threat by firewall protection on computers using the
selected policies.
Using Firewall Protection
Reports for firewall protection