Firewall Profiles Parent topic

Firewall profiles provide flexibility by allowing you to choose the attributes that a client or group of clients must have before applying a policy. Create user roles that can create, configure, or delete profiles for specific domains.
Users using the built-in administrator account or users with full management permissions can also enable the Overwrite client security level exception list option to replace the OfficeScan client profile settings with the server settings.
Profiles include the following:
  • Associated policy: Each profile uses a single policy
  • Client attributes: OfficeScan clients with one or more of the following attributes apply the associated policy:
    • IP address: An OfficeScan client that has a specific IP address, an IP address that falls within a range of IP addresses, or an IP address belonging to a specified subnet
    • Domain: An OfficeScan client that belongs to a certain OfficeScan domain
    • Computer: An OfficeScan client with a specific computer name
    • Platform: An OfficeScan client running a specific platform
    • Logon name: OfficeScan client computers to which specified users have logged on
    • NIC description: An OfficeScan client computer with a matching NIC description
    • Client connection status: If an OfficeScan client is online or offline
      Note
      Note
      An OfficeScan client is online if it can connect to the OfficeScan server or any of the reference servers, and offline if it cannot connect to any server.
  • User privileges: Allow or prevent OfficeScan client users from doing the following:
    • Changing the security level specified in a policy
    • Editing the exception list associated with a policy
      Note
      Note
      These privileges apply only to clients that match the attributes specified in the profile. You can assign other firewall privileges to selected client users. See Firewall Privileges for details.
OfficeScan comes with a default profile named "All clients profile", which uses the "All access" policy. You can modify or delete this default profile. You can also create new profiles. All default and user-created firewall profiles, including the policy associated to each profile and the current profile status, display on the firewall profile list on the web console. Manage the profile list and deploy all profiles to OfficeScan clients. OfficeScan clients store all the firewall profiles on the client computer.