outpre

Preventing Security Risk Outbreaks

When an outbreak occurs, enforce outbreak prevention measures to respond to and contain the outbreak. Configure prevention settings carefully because incorrect configuration may cause unforeseen network issues.

To configure and activate outbreak prevention settings:

• Networked Computers > Outbreak Prevention

1. In the client tree, click the root domain icon to include all clients or select specific domains or clients.

2. Click Start Outbreak Prevention.

3. Click any of the following outbreak prevention policies and then configure the settings for the policy:

• Limit/Deny Access to Shared Folders

• Block Ports

• Deny Write Access to Files and Folders

4. Select the policies you want to enforce.

5. Select the number of hours outbreak prevention will stay in effect. The default is 48 hours. You can manually restore network settings before the outbreak prevention period expires.

• Do not allow outbreak prevention to remain in effect indefinitely. To block or deny access to certain files, folders, or ports indefinitely, modify computer and network settings directly instead of using OfficeScan.

6. Accept or modify the default client notification message.

• To configure OfficeScan to notify you during an outbreak, go to Notifications > Administrator Notifications > Outbreak Notifications.

7. Click Start Outbreak Notification. The outbreak prevention measures you selected display in a new window.

8. Back in the client tree, check the Outbreak Prevention column. A check mark appears on computers applying outbreak prevention measures.

OfficeScan records the following events in the system event logs:

• Server events (initiating outbreak prevention and notifying clients to enable outbreak prevention)

• Client event (enabling outbreak prevention)

See also:

• Security Risk Outbreaks

• Security Risk Outbreak Criteria and Notifications

• Outbreak Prevention Policies

• Disabling Outbreak Prevention