Configuring Suspicious Object List Settings

During OfficeScan registration to an on-premises Control Manager, Control Manager deploys an API key to OfficeScan to start the subscription process. To enable this automatic subscription process, check with the Control Manager administrator to ensure that Control Manager is connected to Deep Discovery and that the required settings are configured.

For details on registering to a Control Manager server, see Registering OfficeScan to Control Manager.

  1. Go to Administration > Settings > Suspicious Object List.
  2. Select which list to enable on agents.
    • Suspicious URL List

    • Suspicious IP List (only available when subscribing to the registered Control Manager server)

    • Suspicious File List (only available when subscribing to the registered Control Manager server)

    • Suspicious Domain List (only available when subscribing to the registered Control Manager server)

    Administrators can manually synchronize the Suspicious Object lists at any time by clicking the Sync Now button.

  3. Under Update the Suspicious Object lists on OfficeScan agents, specify when agents update the Suspicious Object lists.
    • Based on the OfficeScan agent component update schedule: OfficeScan agents update the Suspicious Object lists based on the current update schedule.

    • Automatically after updating the Suspicious Object lists on the server: OfficeScan agents automatically update the Suspicious Object lists after the OfficeScan server receives updated lists.

    Note:

    OfficeScan agents not configured to receive updates from Update Agents perform incremental updates of the subscribed Suspicious Object lists during synchronization.

  4. Click Save.