McAfee TSA00M005PAA Processor Guide

McAfee TSA00M005PAA - Total Protection Service Manual

McAfee TSA00M005PAA manual content summary:

  • McAfee TSA00M005PAA | Processor Guide - Page 1
    McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 2
    NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. License Attributions Refer to the product Release Notes. 2 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 3
    relay servers...14 Management with the support...24 Specifying when computers check for updates 24 Updating client computers manually 24 Disabling updates for non-logged on users 25 Performing setup and maintenance tasks 25 Testing virus McAfee Total Protection Service Product Guide 3
  • McAfee TSA00M005PAA | Processor Guide - Page 4
    computer 38 Management of computer groups...39 Working with groups...40 Management of Active Directory groups 41 Downloading the Active renewing, and moving licenses 62 Using Virus and Spyware Protection 63 How detections are handled...64 4 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 5
    69 Configuring scanning policy options...70 Scheduling a scan...70 Enabling optional types of virus scans 70 Excluding files and folders from virus scans 71 Selecting spyware scanning options 72 Approving and unapproving programs in a policy 72 Managing detections...73 Viewing scan results on
  • McAfee TSA00M005PAA | Processor Guide - Page 6
    service ports...86 Standard assignments for system service Configuring system services and port firewall protection 94 Managing detections...95 Viewing balloons...103 Testing communication problems 103 SiteAdvisor menu protects browser protection sends to McAfee 107 Installing browser protection
  • McAfee TSA00M005PAA | Processor Guide - Page 7
    downloads scan...130 Scheduling scans for devices...131 How detections are reported ...131 Viewing scan results...132 Viewing results for audit scans...132 Viewing results for DNS discovery on domains 133 Viewing results for network discovery scans 133 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 8
    the product and its features. Contents How Total Protection Service works Types of protection Core product strengths New features for this release The role of the client software Updates to the client software Management with the SecurityCenter 8 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 9
    Security Center, where you can access reports that detail the status of client computers and use tools for customizing and managing security. Types of protection The core features in Total Protection Service safeguard against a broad range of threats. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 10
    or brought in from your network, including via email. Every time a file on your computer is accessed, virus and spyware protection scans the file to make sure it is free of viruses and spyware. Establishes a barrier between each computer and the Internet or other computers on your local network. It
  • McAfee TSA00M005PAA | Processor Guide - Page 11
    to security by: 1 Silently monitoring all file input and output, downloads, program executions, inbound and outbound communications, and other system-related activities on client computers. As a result of this monitoring, the client software automatically: McAfee Total Protection Service Product
  • McAfee TSA00M005PAA | Processor Guide - Page 12
    • Regular DAT files, which contain the latest definitions for viruses, potentially unwanted programs, and cookies and registry keys that might update the security data maintained on the SecurityCenter website and used in administrative reports. 12 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 13
    addition, users can check for updates manually at any time by clicking the Total Protection Service icon in the system tray, then workgroup to share downloaded files, which controls Internet traffic and minimizes expensive downloads. 3 Internet McAfee Total Protection Service Product Guide 13
  • McAfee TSA00M005PAA | Processor Guide - Page 14
    connection downloads updates directly from the update site through the relay server. You can specify which computers function as relay servers when you install the client software or at a later time. See the installation guide for more information. 14 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 15
    the SecurityCenter Your service provider sends you a unique URL and login credentials for your account, which you can use to log on to the SecurityCenter. From the SecurityCenter, you can access management tools to monitor the status of computers on your account and configure security settings that
  • McAfee TSA00M005PAA | Processor Guide - Page 16
    licenses. • Links to related portals - Some widgets contain a link to a portal used for managing non-client-based protection, such as email protection and vulnerability scanning to product support and demos. customize their security settings to protect McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 17
    to Sites, Access to • Downloads (Web Filtering) • • Red management allows you to assign different levels and types of protection to different users. If you have created groups, you can assign a unique policy to each group or one policy to all groups. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 18
    the security status for the Sales Team group in reports on the SecurityCenter. 6 The administrator adjusts the Sales policy. The modified policy is downloaded automatically to client computers in the Sales Team group the next time they check for updates. 18 McAfee Total Protection Service
  • McAfee TSA00M005PAA | Processor Guide - Page 19
    Introducing Total Protection Service Management with the SecurityCenter Check reports Whenever client computers check for updates, they upload information about their security status to the to you or other specified persons as an email attachment. McAfee Total Protection Service Product Guide 19
  • McAfee TSA00M005PAA | Processor Guide - Page 20
    example, when downloads are occurring) and perform manual updates. • Icon and protection status summary, which allows access to a limited set of features. • Icon and full console, which allows access to all features. This is the default setting. 20 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 21
    About the icon The Total Protection Service icon appears in the Windows system enew the subscription or buy more licenses. How the icon indicates the status This icon... ...indicates: Total Protection Service is active and there are no : • Your Total Protection Service subscription is expired. Renew
  • McAfee TSA00M005PAA | Processor Guide - Page 22
    McAfee | Managed Services | Total Protection Service a scan target and begin scanning for as viruses and spyware manual) updates at any time, and you can configure optional policy settings for updating tasks. Client software is updated in these ways. 22 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 23
    McAfee might send an EXTRA.DAT file with instructions for manually installing it. For maximum protection, configure your policies to check for an outbreak DAT file every hour. This feature is enabled by default. Updates when no user is logged on In most scenarios, Total Protection Service supports
  • McAfee TSA00M005PAA | Processor Guide - Page 24
    by clicking Start | Programs | McAfee | Managed Services | Total Protection Service. • D etection notifications are not displayed on the desktop of all computer users if the fast user switching feature is enabled. Specifying when computers check for updates For virus and spyware scans to detect all
  • McAfee TSA00M005PAA | Processor Guide - Page 25
    and spyware protection does not detect the virus or interrupt the download process. In this case, use Windows Explorer to delete the EICAR test file from the client computer, then reinstall Total Protection Service and test the new installation. McAfee Total Protection Service Product Guide 25
  • McAfee TSA00M005PAA | Processor Guide - Page 26
    language is not supported on the scanning engine, are scheduled to end or will end within 30 days. • W hen updates to detection definition (DAT) files have ended or will end within 30 days. Task For option definitions, click ? in the interface. 26 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 27
    select or deselect Display support notifications. 4 Click McAfee Virus and Spyware Protection • McAfee Firewall Protection • McAfee Service firewall protection was installed. If the Windows firewall was enabled then, it is re-enabled automatically now. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 28
    • E mpty the Internet Explorer cache and adjust the security level settings to Medium or Medium-high. • E mpty the Internet Explorer cache. (See your browser's documentation for instructions.) • A djust your corporate firewall or proxy settings. 28 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 29
    is logged on if the computer is a domain controller or local security policies prevent the creation of a pseudo user. • A utomatic manually create a Temp folder in the Program Files\McAfee\Managed VirusScan folder. Activate your software. You have not activated your copy of Total Protection Service
  • McAfee TSA00M005PAA | Processor Guide - Page 30
    a management console for monitoring the protection status of computers on your account and assessing their security needs. Administrative features are divided among eight pages: • D ashboard • C omputers • R eports • P olicies • M y Account 30 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 31
    SecurityCenter in the login credentials email or weekly status email you received from your service provider. NOTE: Before typing your login credentials, you can access multimedia demos address that you used to sign up for Total Protection Service. McAfee Total Protection Service Product Guide 31
  • McAfee TSA00M005PAA | Processor Guide - Page 32
    PDF • Comma-separated text Display context-sensitive help Navigate in multiple-page listings Select computers to manage Click the help ( ? ) icon (located along the upper-right margin of the page) checkbox in the heading to select all computers. 32 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 33
    subscriptions and licenses. • S elect, resize, and reposition the widgets that appear on the page. • A ccess associated protection portals by clicking a link (available only when your account includes email protection or vulnerability scanning). McAfee Total Protection Service Product Guide 33
  • McAfee TSA00M005PAA | Processor Guide - Page 34
    you want to display information. (Optional) 3 Do any of the following: To... View instructions to resolve an action item Do this... Click the button at the end of the text. Action items are security issues that need your immediate attention. 34 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 35
    Working with widgets Use this task to view, manage, and access information in widgets. Widgets are small To... TVioe.w.. details about protection coverage View details about protection coverage McAfee Total Protection Service Product Guide Do this... DIno athwisid..g.et, click a color in the pie
  • McAfee TSA00M005PAA | Processor Guide - Page 36
    Buy or renew subscriptions and licenses Click links in the Subscription in an email protection or vulnerability scanning widget. (Available only when your to display click Add to Dashboard. Management of client computers The SecurityCenter provides McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 37
    the individual computer on the Computer Details page. Working with computers Use this task to manage client computers from the Computers page. Task For option definitions, click ? in the Site administrators can search the entire account; group McAfee Total Protection Service Product Guide 37
  • McAfee TSA00M005PAA | Processor Guide - Page 38
    policy options for Protect mode. Working with an individual computer Use this task to manage an individual computer on the Computer Details page. This page displays information about the computer, its service components, and its detections. 38 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 39
    Click here to install link to open the installation wizard. Display instructions for resolving an action item Under Action Items, click the action view and manage security issues for the group separately from the other computers in your account. McAfee Total Protection Service Product Guide 39
  • McAfee TSA00M005PAA | Processor Guide - Page 40
    Management of computer groups For example, you might place all laptops used by traveling sales representatives into a single group called Sales Team. Then you can configure special security specify a new name for the existing group, then click Save. 40 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 41
    Download. Importing Active Directory groups Use this task to import Active Directory groups from your network into the SecurityCenter. Before you begin You must download the Active Directory synchronization utility before you can perform this task. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 42
    Management Configuration tab, then under Push Install utility click Download to get a utility that "pushes" the software scan the computer for threats when installation is complete. Click the help link ( ? ) in the utility for online assistance. 42 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 43
    Using the SecurityCenter Management of Active Directory groups Synchronizing Active Directory groups Use this task to update tab, then click Active Directory Structure to open a page showing the Active Directory tree for your account. McAfee Total Protection Service Product Guide 43
  • McAfee TSA00M005PAA | Processor Guide - Page 44
    . Management of group administrators Group administrators oversee and manage the security information for all client computers in the account, group administrators can access information only for client computers in the groups they are assigned to. 44 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 45
    security data for the groups they are assigned to. 4 Group administrators manage the client computers in their assigned groups. The management Administrators tab, then do any of the following: To... McAfee Total Protection SeArvdidceaPgrrooduupctaGdmuiidneistrator Do this... 1 In the Group
  • McAfee TSA00M005PAA | Processor Guide - Page 46
    high security settings manage policies? The Policies page displays all your policies. Use this page to create, copy, modify, and delete policies for your account. If you have not created any policies, only the McAfee Default policy is displayed. 46 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 47
    running. Display support notifications on client computers Enabled: Notification dialog boxes warn client computer users when software upgrades and DAT file updates are being discontinued for their operating system. McAfee Total Protection Service Product Guide Option Scheduled Scan Settings 47
  • McAfee TSA00M005PAA | Processor Guide - Page 48
    Hide the splash screen UDsiisnpglaythseupSpeocrtunriottyifCiceantitoenrs on client computers Management of security policies Disabled: The McAfee Total Protection Service splash screen is displayed when a computer is powered on and the client software starts running. Enabled: Notification dialog
  • McAfee TSA00M005PAA | Processor Guide - Page 49
    Detect all types of spyware threats during scans. Firewall Protection No allowed applications are intrusions. To ensure the highest level of security, we recommend that administrators create a new to Downloads Block phishing pages McAfee Total Protection Service Product Guide Enforcement Messaging
  • McAfee TSA00M005PAA | Processor Guide - Page 50
    Using the SecurityCenter Management of security policies Option definitions Downloads Regulate access to file downloads according to their safety ratings: • Yellow: Warn • Red: Block • Unrated: Allow NOTE: This feature is not supported computer. 50 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 51
    place. You cannot delete the McAfee Default policy. Generation of security reports Whenever a client computer checks for updates, it also sends its scanning history, update status, and detections types of protection installed appear on this page. McAfee Total Protection Service Product Guide 51
  • McAfee TSA00M005PAA | Processor Guide - Page 52
    Service that include vulnerability scanning, reports are available on the vulnerability scanning portal. Use this report... Detections To view... The types of potentially malicious code or unwanted programs that have been found on your network. Use this report to manage detections of viruses
  • McAfee TSA00M005PAA | Processor Guide - Page 53
    the SecurityCenter Generation of security reports Use this report... Email Protection Reports To view... enabled for versions of Total Protection Service that include the web . 5 Type a subject and a message for the email. 6 Click Save. McAfee Total Protection Service Product Guide 53
  • McAfee TSA00M005PAA | Processor Guide - Page 54
    Using the SecurityCenter Generation of security reports Adding your logo to reports To customize your reports not uploaded a logo. 2 Click Edit. 3 On the Manage Logo page, perform a task. ToT.o..... AdAdddororerpelpalcaecea alolgoogo DDo othtihsi McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 55
    Using the SecurityCenter Generation of security reports SSSSeeeelllleeeecccctttt tttthhhhiiiissss ooooppppttttiiiioooonnnn GGGGrrrroooouuuuppppssss TTTToooo ddddoooo tttthhhhiiiissss DDDDiiiissssppppllllaaaayyyy aaaallllllll CiCiCiMcAfee Total Protection Service Product Guide 55
  • McAfee TSA00M005PAA | Processor Guide - Page 56
    - Create and manage administrators for groups in your account. • A ccounts & Keys - View the company key, enrollment key, and license key for your account information. • L anguage for account correspondence and notifications. 4 Click Save. 56 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 57
    Managing your account Signing up for email notifications Use this task to select the email notifications you want to receive from your service active and you have the right number of licenses to protect new computers as your organization grows. McAfee Total Protection Service Product Guide 57
  • McAfee TSA00M005PAA | Processor Guide - Page 58
    a new type of protection free-of-charge for 30 days, license key on the CD label. See the installation guide for activation instructions. Task For option definitions, click ? in the interface. 1 On the My Account page, click the Accounts & Keys tab. 58 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 59
    the Step 3 page, click Merge Account. Downloading tools and utilities Use this task to access helpful tools for managing your Total Protection Service account. NOTE: Information on using the utilities related to installation is available in the installation guide, available from the Help page. Task
  • McAfee TSA00M005PAA | Processor Guide - Page 60
    submit a description of your problem to a product support representative. • Phone support - Displays a phone number and the grant number for your subscription. You will need to reference the grant number when you speak to a support representative. 60 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 61
    URL for a new account instead of adding licenses to your existing account. (The company key merge multiple accounts, then use the Manage Accounts section of the Accounts & Keys system identifier. To avoid this problem, the software must be installed McAfee Total Protection Service Product Guide 61
  • McAfee TSA00M005PAA | Processor Guide - Page 62
    Frequently asked questions about the SecurityCenter Questions about adding, renewing, and moving licenses Can I move a license from one computer to another? Yes. You can uninstall the client the SecurityCenter. This usually takes about 20 minutes. 62 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 63
    and detections Types of scans Scanning on client computers Configuring scanning policy options Managing detections Reports for virus and spyware protection Best practices (virus and spyware protection) Frequently asked questions Error messages McAfee Total Protection Service Product Guide 63
  • McAfee TSA00M005PAA | Processor Guide - Page 64
    potentially unwanted programs are detected, and for highest security, we recommend using Protect mode. Mode Behavior of virus and spyware protection 64 McAfee Total Protection Service Product Guide MReopdoert B• ehaUvsieorrs oafrevinroutsparonmdpstpedywabaoruetpdreotteectcitoinosn. Report
  • McAfee TSA00M005PAA | Processor Guide - Page 65
    can manage their detections; how frequently computers check for updates; and when scheduled scans occur. On-access (automatic) scans On-access scans are those that occur on client computers whenever users access files (for example, open a file or run a program). McAfee Total Protection Service
  • McAfee TSA00M005PAA | Processor Guide - Page 66
    is installed, or the Windows folder: • S can all cookies. • S can all registry keys. NOTE: At the start of an on-demand scan, all previous detections of potentially unwanted programs are cleared from the Potentially Unwanted Program Viewer. 66 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 67
    . NOTE: At the start of an on-demand scan, all previous detections of potentially unwanted programs are cleared from the Potentially Unwanted Program Viewer. For on-access scans, previous detections remain in the Potentially Unwanted Program Viewer. McAfee Total Protection Service Product Guide 67
  • McAfee TSA00M005PAA | Processor Guide - Page 68
    the results of the scan. Scanning on demand from Windows Explorer Use this task to perform a manual scan from Microsoft Windows Explorer on a client computer. Task 1 In Windows Explorer, right-click any drive or folder, then select Scan Now. 68 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 69
    scanner temporarily, which is useful when working with product support to troubleshoot issues with scanning and cleaning files. Use the same task to re-enable on-access scanning. NOTE: This task disables only on-access scanning. Buffer overflow protection continues to function. To disable buffer
  • McAfee TSA00M005PAA | Processor Guide - Page 70
    still detects viruses. Task For option definitions, click ? in the interface. 1 On the Policies page, click Add Policy (or click Edit to modify an existing policy). 2 Click Virus & Spyware Protection, then click the Advanced Settings tab. 70 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 71
    manage items that are not scanned for viruses. You can add files, folders, or file extensions to the list of exclusions or remove them from the list. Task For option definitions, click ? in the interface. 1 On the Policies page, click Add Policy (or click Edit to modify an existing policy). McAfee
  • McAfee TSA00M005PAA | Processor Guide - Page 72
    spyware scanning features. Task For option definitions, click ? in the interface. 1 On the Policies page, click Add Policy (or click Edit to modify an existing policy). 2 Click Virus & , select additional options for the policy, then click Save.) 72 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 73
    detections • U se these tasks to view and manage threats detected during virus and spyware scans. • F or an individual client computer, perform tasks at the computer (users binary format, where it can be accessed only with the Quarantine Viewer. McAfee Total Protection Service Product Guide 73
  • McAfee TSA00M005PAA | Processor Guide - Page 74
    to the console. Viewing quarantined files on client computers When virus and spyware protection detects a threat, it places a copy of manage quarantined items in the Quarantine Viewer. You must be logged on as an administrator to access this task. 74 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 75
    Virus and Spyware Protection Managing detections Before you begin Enter your administrator credentials by using the Admin Login feature on the client computer. Task 1 Click the Total Protection Service protection mode is configured as Prompt mode. McAfee Total Protection Service Product Guide 75
  • McAfee TSA00M005PAA | Processor Guide - Page 76
    Using Virus and Spyware Protection Managing detections Task For option definitions, click ? in the interface. 1 From the Detections List, click the name of a detection to display detailed information from the McAfee Avert Labs Threat Library. View details about a computer Click a computer name to
  • McAfee TSA00M005PAA | Processor Guide - Page 77
    the malware threats, potentially unwanted programs, buffer overflow processes, and cookies that virus and spyware protection detected on client computers. • U nrecognized Programs report - - Graphs detections on client computers over the past year. McAfee Total Protection Service Product Guide 77
  • McAfee TSA00M005PAA | Processor Guide - Page 78
    Protection Reports for virus and spyware protection Detections report Use the Detections report to view and manage the types of potentially information about the computer, its service components, and its detections. 78 McAfee Total Protection Service Product Guide Select this option... To do
  • McAfee TSA00M005PAA | Processor Guide - Page 79
    detections. Reports for virus and spyware protection rred AApppprroovvee aa pprrooggrraamm Click the name of a potentially unwanted program to display detailed information from the McAfee Avert Labs Threat account or only those in a single group. McAfee Total Protection Service Product Guide 79
  • McAfee TSA00M005PAA | Processor Guide - Page 80
    to specify excluded files and folders or approved programs? Specifying excluded files and folders from scanning can be useful if you know a particular type of file is not vulnerable to attack, or a particular folder is safe. If you use a program to 80 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 81
    the Total Protection Service console on the client computer. NOTE: To prevent this problem, force the computer to re-enable on-access scanning automatically whenever it checks for updates by enabling the associated virus and spyware policy option. McAfee Total Protection Service Product Guide 81
  • McAfee TSA00M005PAA | Processor Guide - Page 82
    Configuring policy options Configuring custom connections Installing and enabling firewall protection at the policy level Managing detections Reports for firewall protection Best practices (firewall protection) Frequently asked questions 82 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 83
    whenever the working environment changes. For example, mobile users who connect to both secured (trusted) and unsecured (untrusted) networks must be able to change their setting originate. When you set up a custom connection, you can designate: McAfee Total Protection Service Product Guide 83
  • McAfee TSA00M005PAA | Processor Guide - Page 84
    . This is required to set up a computer as a server that provides system services. The server will accept communications through any open port from any computer. Conversely, it mode, settings configured by users override administrator settings. 84 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 85
    from appearing on client computers when applications are detected, and for highest security, we recommend using Protect mode. How policy options are implemented in pprroommpptteedd ffoorr aa rreessppoonnssee ttoo , these settings are reinstated. McAfee Total Protection Service Product Guide 85
  • McAfee TSA00M005PAA | Processor Guide - Page 86
    . Supports 32 service. • D isable or remove a port for a system service. NOTE: Select a port for system services only if you are certain it must be open. You will rarely need to open a port. We recommend that you disable unused system services. 86 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 87
    no security threat. However, we recommend that you close unused ports. Standard assignments for system service ports These commonly used standard service Service policy. • E ach client computer user configures firewall settings for their computer. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 88
    the means for you to ensure the highest level of security. You can also allow users to configure their own firewall protection settings. In this case, no other firewall policy options are available for you to select. This is the default setting. 88 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 89
    the firewall • C onnection type NOTE: To ensure the highest level of security, we recommend that administrators configure firewall settings. If you allow users to configure ). 2 S elect Firewall Protection, then click the General Settings tab. McAfee Total Protection Service Product Guide 89
  • McAfee TSA00M005PAA | Processor Guide - Page 90
    options: • W hether firewall protection checks the list of Internet applications that McAfee has determined to be safe at the www.hackerwatch.org website. • W new policy, click Next, select additional options for the policy, then click Save.) 90 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 91
    the ports through which it communicates with client computers using the policy. Opening a system service port on a client computer allows it to act as a server on the local tab. 3 Under Connection Type, select Custom settings, then click edit. ▲▲ McAfee Total Protection Service Product Guide 91
  • McAfee TSA00M005PAA | Processor Guide - Page 92
    policy). 2 Select Firewall Protection, then click the General Settings tab. 3 Under Connection Type, select Custom settings, then click edit. 92 McAfee Total Protection Service Product Guide To do this... Perform these steps... Accept communications from any IP address 1 Select Any computer.
  • McAfee TSA00M005PAA | Processor Guide - Page 93
    to install or enable firewall protection automatically for all computers using the policy. Tasks Installing firewall protection during policy updates Enabling and disabling firewall protection ▲▲ McAfee Total Protection Service Product Guide 93
  • McAfee TSA00M005PAA | Processor Guide - Page 94
    use this feature for adding firewall protection on computers where the Total Protection Service client software is already installed. By default, this option is disabled. NOTE , click Next, select additional options for the policy, then click Save.) 94 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 95
    detections Use these tasks to view and manage suspicious activity and unrecognized applications detected by firewall protection. Tasks Viewing unrecognized programs they will not be detected as unrecognized programs on computers using the policies. McAfee Total Protection Service Product Guide 95
  • McAfee TSA00M005PAA | Processor Guide - Page 96
    Using Firewall Protection Managing detections Before you begin Users can approve applications only when spyware name to display the Computer Details page, which displays information about the computer, its service components, and its detections. 96 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 97
    programs detected on client computers that are not recognized by virus and spyware protection and firewall protection. Allows you to approve to a name. •• UUnnddeerr aa ccoommppuutteerr nnaammee,, sshhooww wwhhiicchh aapppplliiccaattiioonnss event. McAfee Total Protection Service Product Guide 97
  • McAfee TSA00M005PAA | Processor Guide - Page 98
    is installed on all computers. 2 To centralize management and more easily monitor the types of applications and McAfee's www.hackerwatch.org site are approved automatically, minimizing the need for you or users to approve applications manually . 98 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 99
    that the server's system services and Internet applications are configured service ports are configured correctly to prevent disruption of system services allowed Internet applications to the McAfee Default policy? No. However, with the McAfee Default policy settings. Specify a name for
  • McAfee TSA00M005PAA | Processor Guide - Page 100
    general firewall protection Is it okay to run the Windows firewall and Total Protection Service firewall protection at the same time? We recommend that you disable the Windows firewall Internet Explorer is given full access to check for updates. 100 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 101
    owners. The web filtering module, available with some versions of Total Protection Service, provides features for regulating access to websites. Policy options allow administrators to control that matches the safety rating for the current site. McAfee Total Protection Service Product Guide 101
  • McAfee TSA00M005PAA | Processor Guide - Page 102
    ownloading files and checking for viruses and potentially unwanted programs bundled with the download. • E ntering contact information services that can be obtained without cost from other sources. • A dditional analysis by McAfee professionals. 102 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 103
    a download. C lick Troubleshoot to test problems are indicated by a gray SiteAdvisor menu button with disconnected cables. Before you begin Be sure that the option for showing safety balloons is enabled. This option is available on the SiteAdvisor menu. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 104
    safety balloon. 2 In the safety balloon, click Troubleshooting. Three connectivity tests run to verify that: • any instructions to resolve the problem. 4 If you have taken steps to resolve the problem and button by using the View | Toolbars | McAfee SiteAdvisor menu option. This does not affect the
  • McAfee TSA00M005PAA | Processor Guide - Page 105
    Access a brief description of browser protection, its license agreement, and Aitsccpersivsaacybrpieoflicdye.scription of browser protection, its license agreement, and its privacy policy. Safety reports websites, blogs and small business sites that McAfee Total Protection Service Product Guide 105
  • McAfee TSA00M005PAA | Processor Guide - Page 106
    Overall rating about the impact a site's downloadable software had on our testing computer. Red flags are given to sites that have virus-infected downloads or that add unrelated software which many this website. These comments are posted unedited. 106 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 107
    download. security. The focus of browser protection is protecting your client computers; no attempt is made to track personal Internet usage. NOTE: Browser protection does not send information on your company's intranet site to the SiteAdvisor servers. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 108
    access to site resources, such as file downloads, based on their safety rating. • service on all client computers using the policy. This feature is available only in versions of the browser protection service that include the web filtering module. 108 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 109
    yellow, red, or unrated site, specify whether to allow, warn, or block the site. • F or each yellow, red, or unrated download file, specify whether to allow, warn, or block the download. This enables a greater level of granularity in protecting McAfee Total Protection Service Product Guide 109
  • McAfee TSA00M005PAA | Processor Guide - Page 110
    to your business, no matter how they are rated, add them to the Exceptions list as an authorized site. For authorized sites, the browser protection service ignores the safety rating. 110 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 111
    a warning when users attempt to download a file with the specified rating. • A llow - Allow downloads of files with the specified rating. 4 Click Save. (For a new policy, click Next, select additional options for the policy, then click Save.) McAfee Total Protection Service Product Guide 111
  • McAfee TSA00M005PAA | Processor Guide - Page 112
    , warn, or block access to sites based on the type of content they contain. This feature is available only with versions of the browser protection service that include the web filtering module. 112 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 113
    particular types of content. This feature is available only with versions of the browser protection service that include the web filtering module. Task For option definitions, click ? in the or do not conform to company security standards. McAfee Total Protection Service Product Guide 113
  • McAfee TSA00M005PAA | Processor Guide - Page 114
    also access unsafe downloads and phishing pages enterpriseproducts • /us/enterprise/products/security These paths do not match: service does not check for matches in the middle or end of URLs. 114 McAfee Total Protection Service Product Guide Matches • http://www.info.mcafee.com • http://mcafee
  • McAfee TSA00M005PAA | Processor Guide - Page 115
    • /us/enterprise/products/security These paths do not match: • ://salesmcafee.com • http://ftp.mcafee.net Adding authorized and prohibited sites Use this web filtering task to create and manage an Exceptions list for browser in that language. McAfee Total Protection Service Product Guide 115
  • McAfee TSA00M005PAA | Processor Guide - Page 116
    to display the Computer Details page, which computer displays information about the computer, its service components, and its detections. See also Information that browser protection sends to McAfee on page 107 Web Filtering report on page 117 116 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 117
    by browser protection. This report is available only with versions of the browser protection service that include the web filtering module. See also Viewing browsing activity on page 116 users from disabling browser protection on their computers. McAfee Total Protection Service Product Guide 117
  • McAfee TSA00M005PAA | Processor Guide - Page 118
    individual website pages viewed on managed systems? When a client computer uniquely identify the site being rated for security. For example, if a client computer support in Total Protection Service is Troubleshooting to test the connection. 118 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 119
    -the-clock from hundreds of sources worldwide, ensuring its ability to detect the latest risks. • M eets the website security vulnerabilities audit requirements mandated by HIPAA, GRAMMLEACH-BILEY, SARBANES-OXLEY, and other federal legislation. McAfee Total Protection Service Product Guide 119
  • McAfee TSA00M005PAA | Processor Guide - Page 120
    Adds the McAfee SECURE trustmark to your website as proof that it meets the rigorous certification requirements for compliance with the McAfee SECURE data security standard. This program requires daily scanning of your McAfee SECURE devices. McAfee Total Protection Service Product Guide 120
  • McAfee TSA00M005PAA | Processor Guide - Page 121
    The portal provides tools for adding the IP addresses to scan, performing scans, checking scan results, and accessing historical data for scans. If you subscribe to a certification program, access tools and reports for certification on the portal. 121 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 122
    Using the SaaS Vulnerability Scanning Service Overview of scanning process Accessing the SaaS vulnerability scanning portal Use this task to access the SaaS vulnerability scanning portal, which provides tools for managing network security and certification. Task 1 On the Dashboard page of the
  • McAfee TSA00M005PAA | Processor Guide - Page 123
    to scan and configure scanning options. For Service Level, select Devices McAfee SECURE. The Scan Frequency defaults to Daily, per the requirements for certification. You can schedule additional scans as needed. 3 Copy the trustmark code and place it on your website. The code and instructions for
  • McAfee TSA00M005PAA | Processor Guide - Page 124
    vulnerability scanning requirements of the Payment Card Industry (PCI) data security standard (DSS). Devices that process payment card information must be scanned and show compliance with this standard quarterly. Used for the PCI certification program. McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 125
    the SaaS Vulnerability Scanning Service Managing scan devices • M cAfee SECURE standard - Meets the website security vulnerabilities audit requirements mandated by HIPAA, GRAMM-LEACH-BILEY, SARBANES-OXLEY, and other federal legislation. Used for the McAfee SECURE trustmark certification program
  • McAfee TSA00M005PAA | Processor Guide - Page 126
    portal (click the link in the SaaS Vulnerability Scanning/PCI Certification widget on the Dashboard page of the SecurityCenter). 2 In the portal, click the Security tab to display the Security Dashboard page. 3 Under Discovery, select Networks. McAfee Total Protection Service Product Guide 126
  • McAfee TSA00M005PAA | Processor Guide - Page 127
    scans manually whenever you want them. Either service level supports this option. Run scans every day. The Devices McAfee SECURE service level supports this option. Run scans once a week. The Devices McAfee SECURE service level supports this option. Run scans once a month. The Devices McAfee SECURE
  • McAfee TSA00M005PAA | Processor Guide - Page 128
    Using the SaaS Vulnerability Scanning Service Managing scan devices 8 Click Continue, select both acknowledgment checkboxes, then click Add Device. 9 In the Scan Approval list, select the IP addresses or domain names for which you want to approve scans, select both checkboxes under Terms of
  • McAfee TSA00M005PAA | Processor Guide - Page 129
    Vulnerability Scanning Service Managing scan devices scanning portal (click the link in the SaaS Vulnerability Scanning/PCI Certification widget on the Dashboard page of the SecurityCenter). 2 In the portal, click the Security tab to display the Security McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 130
    under the device listing to continue setting up that type of scan. 6 If you are configuring an audit, select the type of audit from the drop-down list. • H ack Simulation - Runs the standard device audit. • D enial of Service - Adds extra tests. McAfee Total Protection Service Product Guide 130
  • McAfee TSA00M005PAA | Processor Guide - Page 131
    you can view scan results, detailed patch recommendations applicable to your specific system configuration, historical audit data, and printable audit reports. To access scan results, click the Security tab to display the Security Dashboard page. 131 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 132
    Open the SaaS vulnerability scanning portal (click the link in the SaaS Vulnerability Scanning/PCI Certification widget on the Dashboard page of the SecurityCenter). 2 In the portal, click the Security tab to display the Security Dashboard page. McAfee Total Protection Service Product Guide 132
  • McAfee TSA00M005PAA | Processor Guide - Page 133
    Auditing. 6 On the Add Devices page, select options adding the devices for scanning. Viewing results for network discovery scans Use this task to view the discovery status for networks in your account and the results of discovery scans performed. 133 McAfee Total Protection Service Product Guide
  • McAfee TSA00M005PAA | Processor Guide - Page 134
    about it. A listing of networks for which results of discovery scans are available. Select the type of report and the networks to report on, then click View to display a report comparing the results of the latest scan with the previous scan. McAfee Total Protection Service Product Guide 134
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134

McAfee Total Protection Service
Product Guide