Default Rules Parent topic

Policy Server provides default rules to give you a basis for configuring settings. The rules cover common and recommended security posture conditions and actions. The following rules are available by default:

Default Rules

Rule Name
Matching Criteria
Response if Criteria Matched
Server Action
OfficeScan client Action
Healthy
Real-time Scan status is enabled and Virus Scan Engine and Virus Pattern are up-to-date.
Healthy
None
None
Checkup
Virus Pattern version is at least one version older than the version on the OfficeScan server to which the OfficeScan client is registered.
Checkup
Create entry in client validation log
  • Update components
  • Perform automatic Cleanup Now on the OfficeScan client after enabling Real-time Scan or after an update
  • Display notification message on the OfficeScan client computer
Tip
Tip
If you use this rule, use automatic deployment. This helps ensure that OfficeScan clients receive the latest Virus Pattern immediately after the OfficeScan downloads new components.
Transition
OfficeScan client computer is in the booting state.
Transition
None
None
Quarantine
Virus Pattern version is at least five versions older than the version on the OfficeScan server to which the OfficeScan client is registered.
Quarantine
Create entry in client validation log
  • Update components
  • Perform automatic Cleanup Now and Scan Now on the OfficeScan client after enabling Real-time Scan or after an update
  • Display notification message on the OfficeScan client computer
Not protected
Real-time Scan status is disabled.
Infected
Create entry in client validation log
  • Enable OfficeScan client Real-time Scan
  • Display notification message on the OfficeScan client computer