McAfee TSA00M005PAA Processor Guide - Page 99

Using Firewall Protection Frequently asked questions 6 Use "learn" mode to identify which Internet applications to allow. This ensures that no applications required for your business are blocked before you have the opportunity to authorize their use. Then change the protection mode to Protect. 7 If particular types of suspicious activity are occurring frequently or certain computers appear vulnerable, update the policy to resolve these issues. • Ensure that firewall protection is enabled. • C arefully specify the environment where client computers are used. For users with mobile computers, ensure that they know how to select the correct connection type each time their environment changes and that their policy allows them to do so. • B efore installing firewall protection on a server, ensure that the server's system services and Internet applications are configured correctly. If there is a possibility that firewall protection might be installed when no user is present to monitor the installation, disable the policy setting for Automatically install the desktop firewall on all computers using this policy. • W hen running firewall protection on a server, ensure that system service ports are configured correctly to prevent disruption of system services. Ensure that no unnecessary ports are open. • F or maximum protection, set firewall protection to Protect mode to automatically block suspicious activity. 8 If your account includes computers that are operated in multiple environments, such as in the office and in unsecured public networks, update the policy appropriately. • C onfigure policy options that allow users to select their connection type to match their environment. Be sure they know when and how to select the appropriate connection type. • If you configure custom connections that include IP addresses, specify ranges of IP addresses appropriate for all their working environments. Frequently asked questions This section includes questions asked by administrators and client computer users that are related to using these features of firewall protection. • P olicies • G eneral issues Questions about policies How can I prevent popup prompts from appearing when unrecognized programs are detected? Firewall protection prompts users for a response to an Internet application detection when set to Prompt mode. To prevent popups, select Protect or Report mode. For highest protection, select Protect to automatically delete unrecognized Internet applications. Can I add allowed Internet applications to the McAfee Default policy? No. However, you can create a new policy and add them. When you click Add Policy on the Policies page of the SecurityCenter, the new policy is prepopulated with the McAfee Default policy settings. Specify a name for the new policy, save it, and then add allowed Internet applications as needed. McAfee Total Protection Service Product Guide 99