Firewall Profiles

Firewall profiles provide flexibility by allowing you to choose the attributes that a single agent or group of agents must have before applying a policy. Create user roles that can create, configure, or delete profiles for specific domains.

Users using the built-in administrator account or users with full management permissions can also enable the Overwrite agent security level/exception list option to replace the OfficeScan agent profile settings with the server settings.

Profiles include the following:

  • Associated policy: Each profile uses a single policy

  • Agent attributes: OfficeScan agents with one or more of the following attributes apply the associated policy:

    • IP address: Any OfficeScan agent that has a specific IP address, an IP address that falls within a range of IP addresses, or an IP address belonging to a specified subnet

    • Domain: Any OfficeScan agent that belongs to a certain OfficeScan domain

    • Endpoint: The OfficeScan agent with a specific endpoint name

    • Platform: Any OfficeScan agent running a specific platform type

    • Logon name: OfficeScan agent endpoints to which specified users have logged on

    • NIC description: Any OfficeScan agent endpoint with a matching NIC description

    • Agent location: If the OfficeScan agent is online or offline

      Note:

      The OfficeScan agent is online if it can connect to the OfficeScan server or any of the reference servers, and offline if it cannot connect to any server.

OfficeScan comes with a default profile named "All agents profile", which uses the "All access" policy. You can modify or delete this default profile. You can also create new profiles. All default and user-created firewall profiles, including the policy associated to each profile and the current profile status, display on the firewall profile list on the web console. Manage the profile list and deploy all profiles to OfficeScan agents. OfficeScan agents store all the firewall profiles on the agent endpoint.