Quote:
Access Protection.
This feature gives you the power to prevent intrusions by restricting access to ports, shares, files, and folders. Port blocking and share blocking restrict inbound connections. Blocking files and folders protects all accesses. Once you restrict access to a port, share, file, or folder, it remains blocked until you unblock it. This can be a very powerful tool both before and during virus outbreaks. In the event of an outbreak, the administrator can block access to the infected areas until a DAT is released.
NOTE:
If you block a port that is used by the ePolicy Orchestrator agent or the Entercept agent, the agent’s processes are trusted by the filter and are allowed to communicate with the blocked port. All other traffic not related to these agent processes will be blocked. This Beta version of VirusScan Enterprise includes six default sample rules that you can use when testing file, share, and folder protection. These rules are also documented in the Access Protection chapter of the Product Guide.
- Source IP (On-access scanning).
When the on-access scanner detects a virus, it displays the Source IP for the detection in the on-access scan statistics dialog box and the on-access scan messages dialog box.
- Blocking (On-access scanning).
This feature blocks connections from remote computers which have infected files in a shared folder. You can specify how long to block these connections. If you want to unblock all connections before the specified time limit, you can do so from the on-access scanning statistics dialog box.
- Buffer Overflow Protection.
Use this feature to block exploited buffer overflows from executing code on your computer. To avoid false positives, VirusScan Enterprise protects approximately 20 applications. These protected applications are defined in a separate DAT file.
- Unwanted Programs Policy.
Undesirable programs, such as Spyware and Adware, are not only a nuisance; they can also be a security risk. Use this feature to detect these unwanted programs. You have the option of blocking categories of programs, specific programs selected from the latest DAT file, or you can detect programs that you define.
You configure one policy that applies to all scanners. However, the policy is enabled individually in each scanner, and each scanner can be configured differently to specify which actions are taken when an unwanted program is detected.
- Script Scanning (On-access scanning).
This feature scans JavaScript and VBScript scripts before they are executed. The script scanner operates as a proxy component to the real Windows scripting host component. It intercepts the execution of these scripts and scans them. If they are clean, they are passed on to the real host. It the script is infected, it is not executed.
- Lotus Notes (E-mail scanning).
Both the on-delivery e-mail scanner and the on-demand e-mail scanner now scan Lotus Notes messages and databases, in addition to MAPI-based e-mail, such as Microsoft Outlook.
You configure one set of properties that applies to whichever e-mail client you have installed.
- Selective Updating (AutoUpdate).
Selectively update just the DAT file, scanning engine, product upgrades, HotFixes, Patches, or Service Packs, etc., using the AutoUpdate task in the VirusScan Console.
- Alert Manager – Local alerting.
Generate SNMP traps and local event log entries without installing Alert Manager Server locally.
- Repair Installation.
A new item in the VirusScan Console Help menu allows you to repair the installation. You have the option of restoring the product to the original installation settings or reinstalling the program files.
The user must have administrative rights to perform these functions. The administrator can protect this feature by setting a password for it from the User Interface Options, Password Options dialog box.
WARNING:
Customized settings will be lost when ,restoring the product to the original installation settings.
HotFixes, Patches, and Service Packs will be overwritten when reinstalling the program files.
- What am I protected from?
- A new feature has been added to the VirusScan Console Help menu and the About dialog box. Select "What am I protected from?" to view a list of items included in the current DAT file.
- Error Reporting Service.
When enabled, the Error Reporting Service provides constant background monitoring of Network Associates applications and prompts the user when it detects a problem. When an error is detected, the user can choose to either submit data for analysis or ignore the error. Enable the Error Reporting Service from the Tools menu in the VirusScan Console.
Image Resized