Configuring Security Risk Outbreak Prevention Parent topic

When an outbreak occurs, enforce outbreak prevention measures to respond to and contain the outbreak. Configure prevention settings carefully because incorrect configuration may cause unforeseen network issues.

Procedure

  1. Navigate to Networked ComputersOutbreak Prevention.
  2. In the client tree, click the root domain icon (icon_root-4.bmp) to include all clients or select specific domains or clients.
  3. Click Start Outbreak Prevention.
  4. Click any of the following outbreak prevention policies and then configure the settings for the policy:
  5. Select the policies you want to enforce.
  6. Select the number of hours outbreak prevention will stay in effect. The default is 48 hours. You can manually restore network settings before the outbreak prevention period expires.
    WARNING
    WARNING
    Do not allow outbreak prevention to remain in effect indefinitely. To block or deny access to certain files, folders, or ports indefinitely, modify computer and network settings directly instead of using OfficeScan.
  7. Accept or modify the default client notification message.
    Note
    Note
    To configure OfficeScan to notify you during an outbreak, go to NotificationsAdministrator NotificationsOutbreak Notifications.
  8. Click Start Outbreak Notification.
    The outbreak prevention measures you selected display in a new window.
  9. Back in the Outbreak Prevention client tree, check the Outbreak Prevention column.
    A check mark appears on computers applying outbreak prevention measures.
OfficeScan records the following events in the system event logs:
  • Server events (initiating outbreak prevention and notifying clients to enable outbreak prevention)
  • OfficeScan client event (enabling outbreak prevention)