McAfee MIS80E001RAI User Guide - Page 27

Enable WormStopper recommended, your setting.

Page 27 highlights

Using ActiveShield 3 Click Enable WormStopper (recommended) (Figure 2-2). By default, the following detailed options are enabled: Pattern matching to detect suspect activity Alerting when e-mail is sent to 40 or more recipients Alerting when 5 or more e-mails are sent within 30 seconds NOTE If you modify the number of recipients or seconds for monitoring sent e-mails, it might result in invalid detections. McAfee recommends that you click No to retain the default setting. Otherwise, click Yes to change the default setting to your setting. This option can be automatically enabled after the first time a potential worm is detected (see Managing potential worms on page 33 for details): Automatic blocking of suspect outbound e-mails Figure 2-2. Advanced ActiveShield Options - E-mail tab User Guide 27

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145

User Guide
27
Using ActiveShield
3
Click
Enable WormStopper (recommended)
(
Figure 2-2
).
By default, the following detailed options are enabled:
³
Pattern matching to detect suspect activity
³
Alerting when e-mail is sent to 40 or more recipients
³
Alerting when 5 or more e-mails are sent within 30 seconds
NOTE
If you modify the number of recipients or seconds for
monitoring sent e-mails, it might result in invalid detections.
McAfee recommends that you click
No
to retain the default
setting. Otherwise, click
Yes
to change the default setting to
your setting.
This option can be automatically enabled after the first time a potential worm
is detected (see
Managing potential worms
on page 33
for details):
³
Automatic blocking of suspect outbound e-mails
Figure 2-2. Advanced ActiveShield Options - E-mail tab