Last Updated: 1/22/2020 12:10:59 AM
Retrieve policies with given customers.
Request
HTTP Request
GET /SMPI/{version}/service/wfbss/api/policies
Parameters
Name |
Type |
Description |
Validation |
|---|---|---|---|
|
Required Parameters |
|||
|
cids |
string |
Customer ID |
Only accept one Customer ID |
|
Optional Parameters |
|||
|
fields |
string |
A list of policies separated by comma. |
For Windows, please refer to Windows' Policy page For Mac, please refer to Mac's Policy page For Android, please refer to Android's Policy page For iOS, please refer to iOS' Policy page |
|
gids |
String |
A list of group IDs separated by comma |
|
|
os |
String |
OS type |
Valid option: win, mac, android, or ios. The default value is win. |
page |
integer |
Page number |
1 to max. If not set, default is 1 |
limit |
integer |
Number of records per page |
1 to 100. If not set, default is 100 |
HTTP Request Example
Retrieve policies:
GET /SMPI/{version}/service/wfbss/api/policies?cids=640FE47F-5118-4D79-8221-A35D0DE2EE2C
Retrieve some of policies:
GET /SMPI/{version}/service/wfbss/api/policies?cids=640FE47F-5118-4D79-8221-A35D0DE2EE2C&fields=scan_mode,realtime_scan
Retrieve some of policies for specific OS type:
GET /SMPI/{version}/service/wfbss/api/policies?cids=640FE47F-5118-4D79-8221-A35D0DE2EE2C&os=win&fields=scan_mode,realtime_scan
Request Body
Do not supply a request body with this method.
Response
Response
If successful, this method returns an HTTP 200 OK status code and a response body with the following structure:
{
"paging": {
"limit": 100,
"page": 1,
"total": 2
},
"customers":[
{
"count":2,
"id":"74AE704D-CD9E-4F45-A62B-CA3AED65F99F",
"policies":[
{
"policy":{
"wtp":{
"enable_bes":0,
"enabled":1,
"level":1
},
"schedule":{
"enabled":0,
"daily_hour":12,
"daily_min":30,
"frequency":2,
"weekly_data":1
},
"firewall":{
"level":3,
"enabled":0,
"enable_alert_msg":0,
"enable_ids":0,
"mode":0,
"exceptions":[
{
"protocol":1,
"name":"DNS",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
53
],
"method":3
},
"outbound":1
},
{
"protocol":1,
"name":"NetBIOS",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
137,
138,
139,
445
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"HTTPS",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
443
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"HTTP",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
80
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"Telnet",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
23
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"SMTP",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
25
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"FTP",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
21
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"POP3",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
110
],
"method":3
},
"outbound":1
}
]
},
"approvals":{
"approved":[
{
"id":11467,
"name":"ADW_007GUARD"
},
{
"id":10652,
"name":"ADW_AAFC"
}
]
},
"scan_mode":{
"mode":0
},
"realtime_scan":{
"enabled":1,
"settings":{
"action":{
"action_info":[
{
"second_action":4,
"threat":0,
"first_action":2
},
{
"second_action":4,
"threat":1,
"first_action":2
},
{
"second_action":2,
"threat":2,
"first_action":3
},
{
"second_action":0,
"threat":3,
"first_action":0
},
{
"second_action":4,
"threat":4,
"first_action":2
},
{
"second_action":4,
"threat":5,
"first_action":2
},
{
"second_action":2,
"threat":99,
"first_action":3
},
{
"second_action":2,
"threat":6,
"first_action":3
},
{
"second_action":2,
"threat":100,
"first_action":3
}
],
"virus_detection_method":0,
"backup_before_clean":1,
"display_virus_alert_msg":0,
"display_spyware_alert_msg":0
},
"target":{
"scan_network_folder":0,
"exclusion":{
"exclude_extensions":[
"EVT",
"EVTX",
"LOG",
"OST",
"PST"
],
"exclude_trend_product":1,
"enabled":1,
"default_extensions":"\"\",ACCDB,ACE,AMG,ARJ,BAT,BIN,BOO,BOX,BZ2,CAB,CDR,CDT,CHM,CLA,CLASS,COM,CPT,CSC,DLL,DOC,DOCM,DOCX,DOT,DOTM,DOTX,DRV,DVB,DWG,DWT,EML,EPOC,EXE,GMS,GZ,HLP,HTA,HTM,HTML,HTT,INI,JAR,JPEG,JPG,JS,JSE,JTD,JTT,LNK,LZH,MDB,MPD,MPP,MPT,MSG,MSI,MSO,MST,NWS,OBD,OCX,OFT,OVL,PDF,PHP,PIF,PL,PM,POT,POTM,POTX,PPAM,PPS,PPSM,PPSX,PPT,PPTM,PPTX,PRC,QPW,RAR,REG,RTF,SCR,SHS,SHW,SIS,SIT,SWF,SYS,TAR,VBE,VBS,VSD,VSS,VST,VXD,WMF,WML,WPD,WPT,WSF,XLA,XLAM,XLS,XLSB,XLSM,XLSX,XLT,XLTM,XLTX,XML,Z,ZIP"
},
"scan_extension_list":[
".\"\"",
".ACCDB",
".ARJ",
".BAT",
".BIN",
".BOO",
".CAB",
".CHM",
".CLA",
".CLASS",
".COM",
".CSC",
".DLL",
".DOC",
".DOCM",
".DOCX",
".DOT",
".DOTM",
".DOTX",
".DRV",
".EML",
".EXE",
".GZ",
".HLP",
".HTA",
".HTM",
".HTML",
".HTT",
".INI",
".JAR",
".JPEG",
".JPG",
".JS",
".JSE",
".LNK",
".LZH",
".MDB",
".MPD",
".MPP",
".MPT",
".MSG",
".MSO",
".NWS",
".OCX",
".OFT",
".OVL",
".PDF",
".PHP",
".PIF",
".PL",
".POT",
".POTM",
".POTX",
".PPAM",
".PPS",
".PPSM",
".PPSX",
".PPT",
".PPTM",
".PPTX",
".PRC",
".RAR",
".REG",
".RTF",
".SCR",
".SHS",
".SYS",
".TAR",
".VBE",
".VBS",
".VSD",
".VSS",
".VST",
".VXD",
".WML",
".WSF",
".XLA",
".XLAM",
".XLS",
".XLSB",
".XLSM",
".XLSX",
".XLT",
".XLTM",
".XLTX",
".XML",
".Z",
".ZIP",
".{*"
],
"scan_compressed":1,
"compress_layer_limit":2,
"condition":0,
"method":1,
"advanced":{
"scan_bottrap":1,
"scan_boot":0,
"enable_memory_scan":0,
"scan_floppy":0
}
}
}
},
"manual_scan":{
"settings":{
"action":{
"action_info":[
{
"second_action":2,
"threat":100,
"first_action":3
},
{
"second_action":4,
"threat":0,
"first_action":2
},
{
"second_action":4,
"threat":1,
"first_action":2
},
{
"second_action":2,
"threat":2,
"first_action":3
},
{
"second_action":0,
"threat":3,
"first_action":0
},
{
"second_action":4,
"threat":4,
"first_action":2
},
{
"second_action":4,
"threat":5,
"first_action":2
},
{
"second_action":2,
"threat":99,
"first_action":3
},
{
"second_action":2,
"threat":6,
"first_action":3
}
],
"virus_detection_method":0,
"scan_speed":0,
"backup_before_clean":1
},
"target":{
"scan_network_folder":0,
"exclusion":{
"exclude_extensions":[
"EVT",
"EVTX",
"LOG",
"OST",
"PST"
],
"exclude_trend_product":1,
"enabled":1,
"default_extensions":"\"\",ACCDB,ACE,AMG,ARJ,BAT,BIN,BOO,BOX,BZ2,CAB,CDR,CDT,CHM,CLA,CLASS,COM,CPT,CSC,DLL,DOC,DOCM,DOCX,DOT,DOTM,DOTX,DRV,DVB,DWG,DWT,EML,EPOC,EXE,GMS,GZ,HLP,HTA,HTM,HTML,HTT,INI,JAR,JPEG,JPG,JS,JSE,JTD,JTT,LNK,LZH,MDB,MPD,MPP,MPT,MSG,MSI,MSO,MST,NWS,OBD,OCX,OFT,OVL,PDF,PHP,PIF,PL,PM,POT,POTM,POTX,PPAM,PPS,PPSM,PPSX,PPT,PPTM,PPTX,PRC,QPW,RAR,REG,RTF,SCR,SHS,SHW,SIS,SIT,SWF,SYS,TAR,VBE,VBS,VSD,VSS,VST,VXD,WMF,WML,WPD,WPT,WSF,XLA,XLAM,XLS,XLSB,XLSM,XLSX,XLT,XLTM,XLTX,XML,Z,ZIP"
},
"scan_extension_list":[
".\"\"",
".ACCDB",
".ARJ",
".BAT",
".BIN",
".BOO",
".CAB",
".CHM",
".CLA",
".CLASS",
".COM",
".CSC",
".DLL",
".DOC",
".DOCM",
".DOCX",
".DOT",
".DOTM",
".DOTX",
".DRV",
".EML",
".EXE",
".GZ",
".HLP",
".HTA",
".HTM",
".HTML",
".HTT",
".INI",
".JAR",
".JPEG",
".JPG",
".JS",
".JSE",
".LNK",
".LZH",
".MDB",
".MPD",
".MPP",
".MPT",
".MSG",
".MSO",
".NWS",
".OCX",
".OFT",
".OVL",
".PDF",
".PHP",
".PIF",
".PL",
".POT",
".POTM",
".POTX",
".PPAM",
".PPS",
".PPSM",
".PPSX",
".PPT",
".PPTM",
".PPTX",
".PRC",
".RAR",
".REG",
".RTF",
".SCR",
".SHS",
".SYS",
".TAR",
".VBE",
".VBS",
".VSD",
".VSS",
".VST",
".VXD",
".WML",
".WSF",
".XLA",
".XLAM",
".XLS",
".XLSB",
".XLSM",
".XLSX",
".XLT",
".XLTM",
".XLTX",
".XML",
".Z",
".ZIP",
".{*"
],
"scan_compressed":1,
"compress_layer_limit":2,
"method":0,
"advanced":{
"scan_bottrap":1,
"scan_boot":1
}
}
}
},
"device_control":{
"enabled":0,
"exception_list":[
{
"item":"C:\\ex1.exe",
"type":0
}
],
"dac_item":[
{
"action":0,
"enabled":0,
"event":1
},
{
"action":0,
"enabled":0,
"event":5
}
]
},
"behavior_monitoring":{
"bhvs":{
"behaviors":[
{
"action":1,
"msg":{
"name":"Duplicated System File",
"description":"Many malicious programs create copies of themselves or other malicious programs using file names used by Windows system files. This is typically done to override or replace system files, avoid detection, or discourage users from deleting the malicious files.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to create a file using the name of a Windows system file. Most normal applications, except Windows patches, will not replace system files or use the same names.",
"event":11
},
"enabled":1,
"event":11
},
{
"action":2,
"msg":{
"name":"Hosts File Modification",
"description":"The Hosts file matches domain names with IP addresses. Many malicious programs modify the Hosts file so that the Web browser is redirected to infected, non-existent, or fake Web sites.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify the Hosts file. This change may cause your browser to get directed to an infected or fake Web site every time you access certain Web addresses. It can also prevent you from accessing certain Web sites.",
"event":2
},
"enabled":1,
"event":2
},
{
"action":0,
"msg":{
"name":"Suspicious Behavior",
"description":"Suspicious behavior can be a specific action or a series of actions that is rarely carried out by legitimate programs. Programs exhibiting suspicious behavior should be used with caution.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting some unexpected operations and can be harmful.",
"event":16
},
"enabled":1,
"event":16
},
{
"action":1,
"msg":{
"name":"New Internet Explorer Plugin",
"description":"Spyware programs often install unwanted Internet Explorer plugins, including toolbars and Browser Helper Objects.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to add a plugin to Internet Explorer. Plugins, such as toolbars or Browser Helper Objects, can add both desirable and unwanted features to Internet Explorer.",
"event":4
},
"enabled":1,
"event":4
},
{
"action":2,
"msg":{
"name":"Internet Explorer Setting Modification",
"description":"Many viruses and spyware programs change Internet Explorer settings, including the home page, trusted Web sites, proxy server settings, and menu extensions.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to configure Internet Explorer. This can result in changes to your home page, trusted Web sites, and other settings.",
"event":5
},
"enabled":1,
"event":5
},
{
"action":2,
"msg":{
"name":"Security Policy Modification",
"description":"Modifications in Windows Security Policy can allow unwanted applications to run and change system settings.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify the Windows Security Policy. Security Policy changes can leave the computer more vulnerable to different threats.",
"event":8
},
"enabled":1,
"event":8
},
{
"action":1,
"msg":{
"name":"Program Library Injection",
"description":"Many malicious programs configure Windows so that all applications automatically load a program library (DLL). This allows the malicious routines in the DLL to run every time an application starts.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to configure Windows so that a program library (DLL) is automatically loaded by some or all of your applications. If the DLL is malicious, this change can drastically affect your computer's security and stability.",
"event":3
},
"enabled":1,
"event":3
},
{
"action":1,
"msg":{
"name":"Shell Modification",
"description":"Many malicious programs modify Windows shell settings to associate themselves to certain file types. This routine allows malicious programs to launch automatically if users open the associated files in Windows Explorer. Changes to Windows shell settings can also allow malicious programs to track the programs used and start alongside legitimate applications.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to change the Windows Explorer shell settings, which determine the applications that open certain file types.",
"event":6
},
"enabled":1,
"event":6
},
{
"action":1,
"msg":{
"name":"New Service",
"description":"Windows services are processes that have special functions and typically run continuously in the background with full administrative access. Malicious programs sometimes install themselves as services to stay hidden.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to create a new service. Services typically run continuously in the background with full administrative access.",
"event":7
},
"enabled":1,
"event":7
},
{
"action":2,
"msg":{
"name":"System File Modification",
"description":"Certain Windows system files determine system behavior, including startup programs and screensaver settings. Many malicious programs modify system files to launch automatically at startup and control system behavior.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify Windows system files. These files can affect different settings, including whether certain applications run at startup.",
"event":10
},
"enabled":1,
"event":10
},
{
"action":1,
"msg":{
"name":"Firewall Policy Modification",
"description":"The Windows Firewall policy determines the applications that have access to the network, the ports that are open for communication, and the IP addresses that can communicate with the computer. Many malicious programs modify the policy to allow themselves to access to the network and the Internet.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify Windows Firewall settings. This may allow it or another application unhampered access to the network or the Internet.",
"event":9
},
"enabled":1,
"event":9
},
{
"action":0,
"msg":{
"name":"System Process Modification",
"description":"Many malicious programs perform various actions on built-in Windows processes. These actions can include terminating or modifying running processes.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to perform an unexpected action on a Windows process.",
"event":14
},
"enabled":1,
"event":14
},
{
"action":1,
"msg":{
"name":"New Startup Program",
"description":"Malicious applications usually add or modify autostart entries in the Windows registry to automatically launch every time the computer starts.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to allow itself or other applications to launch every time Windows starts.",
"event":1
},
"enabled":1,
"event":1
}
]
},
"approved_list":[
"C:\\Program Files\\MSN Messenger\\MSVS.exe"
],
"locale":"en-us",
"enabled":1,
"update_ts":1397618125,
"enable_adc":1,
"enable_dre":1,
"enable_intuit":0,
"enable_pem":0,
"enable_srp":1,
"enable_umh":1,
"block_list":[
"C:\\Program Files\\MSN Messenger\\Fake_MSVS.exe"
],
"td":{
"enable_td":1,
"td_mode":1
}
},
"scheduled_scan":{
"settings":{
"action":{
"scan_speed":0,
"action_info":[
{
"second_action":2,
"threat":100,
"first_action":3
},
{
"second_action":4,
"threat":0,
"first_action":2
},
{
"second_action":4,
"threat":1,
"first_action":2
},
{
"second_action":2,
"threat":2,
"first_action":3
},
{
"second_action":0,
"threat":3,
"first_action":0
},
{
"second_action":4,
"threat":4,
"first_action":2
},
{
"second_action":4,
"threat":5,
"first_action":2
},
{
"second_action":2,
"threat":99,
"first_action":3
},
{
"second_action":2,
"threat":6,
"first_action":3
}
],
"virus_detection_method":0,
"backup_before_clean":1,
"display_virus_alert_msg":0,
"display_spyware_alert_msg":0
},
"target":{
"exclusion":{
"exclude_extensions":[
"EVT",
"EVTX",
"LOG",
"OST",
"PST"
],
"exclude_trend_product":1,
"enabled":1,
"default_extensions":"\"\",ACCDB,ACE,AMG,ARJ,BAT,BIN,BOO,BOX,BZ2,CAB,CDR,CDT,CHM,CLA,CLASS,COM,CPT,CSC,DLL,DOC,DOCM,DOCX,DOT,DOTM,DOTX,DRV,DVB,DWG,DWT,EML,EPOC,EXE,GMS,GZ,HLP,HTA,HTM,HTML,HTT,INI,JAR,JPEG,JPG,JS,JSE,JTD,JTT,LNK,LZH,MDB,MPD,MPP,MPT,MSG,MSI,MSO,MST,NWS,OBD,OCX,OFT,OVL,PDF,PHP,PIF,PL,PM,POT,POTM,POTX,PPAM,PPS,PPSM,PPSX,PPT,PPTM,PPTX,PRC,QPW,RAR,REG,RTF,SCR,SHS,SHW,SIS,SIT,SWF,SYS,TAR,VBE,VBS,VSD,VSS,VST,VXD,WMF,WML,WPD,WPT,WSF,XLA,XLAM,XLS,XLSB,XLSM,XLSX,XLT,XLTM,XLTX,XML,Z,ZIP"
},
"scan_extension_list":[
".\"\"",
".ACCDB",
".ARJ",
".BAT",
".BIN",
".BOO",
".CAB",
".CHM",
".CLA",
".CLASS",
".COM",
".CSC",
".DLL",
".DOC",
".DOCM",
".DOCX",
".DOT",
".DOTM",
".DOTX",
".DRV",
".EML",
".EXE",
".GZ",
".HLP",
".HTA",
".HTM",
".HTML",
".HTT",
".INI",
".JAR",
".JPEG",
".JPG",
".JS",
".JSE",
".LNK",
".LZH",
".MDB",
".MPD",
".MPP",
".MPT",
".MSG",
".MSO",
".NWS",
".OCX",
".OFT",
".OVL",
".PDF",
".PHP",
".PIF",
".PL",
".POT",
".POTM",
".POTX",
".PPAM",
".PPS",
".PPSM",
".PPSX",
".PPT",
".PPTM",
".PPTX",
".PRC",
".RAR",
".REG",
".RTF",
".SCR",
".SHS",
".SYS",
".TAR",
".VBE",
".VBS",
".VSD",
".VSS",
".VST",
".VXD",
".WML",
".WSF",
".XLA",
".XLAM",
".XLS",
".XLSB",
".XLSM",
".XLSX",
".XLT",
".XLTM",
".XLTX",
".XML",
".Z",
".ZIP",
".{*"
],
"scan_compressed":1,
"compress_layer_limit":2,
"method":0,
"advanced":{
"scan_bottrap":1,
"scan_boot":1
}
}
}
},
"mail_scan":{
"enable_realtime_scan":0,
"enable_toolbar":0
},
"client_privileges":{
"scan_settings":{
"display_realtime_scan_tab":0,
"display_scheduled_scan_tab":0,
"allow_enable_scheduled_scan":0,
"allow_stop_scheduled_scan":0,
"enable_scheduled_scan_warning":0,
"display_manual_scan_tab":0,
"allow_postpone_scheduled_scan":0
},
"wtp":{
"continue_browsing":0,
"allow_edit_approved_url_list":0
},
"firewall":{
"enable_switching":0,
"display_tab":0
},
"behavior_monitoring":{
"display_tab":0
},
"url_filtering":{
"continue_browsing":0
},
"mail_scan":{
"allow_configure":0
},
"update_settings":{
"disable_upgrade":0
},
"client_security":{
"degree":1
}
},
"url_filtering":{
"business_hours_2":{
"type":3,
"time_slots":[
0,
0,
16515072,
4092,
16515072,
4092,
16515072,
4092,
16515072,
4092,
16515072,
4092,
0,
0
]
},
"business_hours":{
"days":{
"wed":1,
"sun":0,
"thu":1,
"tue":1,
"mon":1,
"fri":1,
"sat":0
},
"afternoon":{
"enabled":1,
"time_range":{
"range_to":64800,
"range_from":46800
}
},
"timeofday_type":1,
"morning":{
"enabled":1,
"time_range":{
"range_to":43200,
"range_from":32400
}
}
},
"filter_rules":{
"categories":[
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":1
},
{
"enable_business_hour":1,
"enable_leisure_hour":1,
"rule_id":2
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":3
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":4
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":5
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":6
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":8
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":9
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":10
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":11
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":14
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":15
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":16
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":25
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":26
}
],
"uc_type":1
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":21
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":31
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":32
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":45
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":58
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":59
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":60
}
],
"uc_type":2
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":24
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":40
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":41
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":42
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":50
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":51
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":52
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":53
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":89
}
],
"uc_type":3
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":27
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":34
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":35
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":36
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":37
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":38
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":46
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":48
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":49
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":67
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":90
}
],
"uc_type":4
},
{
"rules":[
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":39
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":73
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":74
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":75
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":76
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":77
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":78
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":79
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":80
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":81
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":82
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":83
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":84
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":85
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":86
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":88
}
],
"uc_type":5
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":18
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":19
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":20
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":22
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":29
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":30
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":33
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":44
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":47
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":54
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":55
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":61
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":62
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":63
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":64
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":65
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":66
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":68
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":87
}
],
"uc_type":6
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":23
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":43
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":56
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":57
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":69
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":70
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":71
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":72
}
],
"uc_type":7
}
]
},
"enabled":1,
"level":3
},
"ts_toolbar":{
"enable_keystroke_encryption":0,
"enable_page_rating":0,
"enable_wifi_advisor":0
},
"approved_blocked_url":{
"enabled":0,
"approved":{
"urls":[
"http://www.trendmicro.com/*",
"http://wustat.windows.com/*",
"http://windowsupdate.microsoft.com/*",
"http://uk.trendmicro-europe.com/*",
"http://servicecenter.antivirus.com/*",
"http://office.microsoft.com/*",
"http://kb.trendmicro.com/*",
"http://housecall.antivirus.com/*",
"http://download.windowsupdate.com/*",
"http://download.microsoft.com/*",
"http://c.microsoft.com/*",
"http://support.apple.com/*/downloads/*",
"http://support.apple.com/downloads/*",
"http://supportdownload.apple.com/*",
"http://swupdate.apple.com/*"
]
}
}
},
"gid":[
2
],
"type":2
},
{
"policy":{
"wtp":{
"enable_bes":0,
"enabled":1,
"level":1
},
"schedule":{
"enabled":0,
"daily_hour":12,
"daily_min":30,
"frequency":2,
"weekly_data":1
},
"firewall":{
"level":3,
"enabled":0,
"enable_alert_msg":0,
"enable_ids":0,
"mode":0,
"exceptions":[
{
"protocol":1,
"name":"DNS",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
53
],
"method":3
},
"outbound":1
},
{
"protocol":1,
"name":"NetBIOS",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
137,
138,
139,
445
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"HTTPS",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
443
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"HTTP",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
80
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"Telnet",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
23
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"SMTP",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
25
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"FTP",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
21
],
"method":3
},
"outbound":1
},
{
"protocol":2,
"name":"POP3",
"inbound":1,
"ip_selection":{
"method":1
},
"allow":1,
"port_selection":{
"specific_ports":[
110
],
"method":3
},
"outbound":1
}
]
},
"approvals":{
"approved":[
{
"id":11467,
"name":"ADW_007GUARD"
}
]
},
"scan_mode":{
"mode":0
},
"realtime_scan":{
"enabled":1,
"settings":{
"action":{
"action_info":[
{
"second_action":4,
"threat":0,
"first_action":2
},
{
"second_action":4,
"threat":1,
"first_action":2
},
{
"second_action":2,
"threat":2,
"first_action":3
},
{
"second_action":0,
"threat":3,
"first_action":0
},
{
"second_action":4,
"threat":4,
"first_action":2
},
{
"second_action":4,
"threat":5,
"first_action":2
},
{
"second_action":2,
"threat":99,
"first_action":3
},
{
"second_action":2,
"threat":6,
"first_action":3
},
{
"second_action":2,
"threat":100,
"first_action":3
}
],
"virus_detection_method":0,
"backup_before_clean":1,
"display_virus_alert_msg":0,
"display_spyware_alert_msg":0
},
"target":{
"scan_network_folder":0,
"exclusion":{
"exclude_extensions":[
"EVT",
"EVTX",
"LOG",
"OST",
"PST"
],
"exclude_trend_product":1,
"enabled":1,
"default_extensions":"\"\",ACCDB,ACE,AMG,ARJ,BAT,BIN,BOO,BOX,BZ2,CAB,CDR,CDT,CHM,CLA,CLASS,COM,CPT,CSC,DLL,DOC,DOCM,DOCX,DOT,DOTM,DOTX,DRV,DVB,DWG,DWT,EML,EPOC,EXE,GMS,GZ,HLP,HTA,HTM,HTML,HTT,INI,JAR,JPEG,JPG,JS,JSE,JTD,JTT,LNK,LZH,MDB,MPD,MPP,MPT,MSG,MSI,MSO,MST,NWS,OBD,OCX,OFT,OVL,PDF,PHP,PIF,PL,PM,POT,POTM,POTX,PPAM,PPS,PPSM,PPSX,PPT,PPTM,PPTX,PRC,QPW,RAR,REG,RTF,SCR,SHS,SHW,SIS,SIT,SWF,SYS,TAR,VBE,VBS,VSD,VSS,VST,VXD,WMF,WML,WPD,WPT,WSF,XLA,XLAM,XLS,XLSB,XLSM,XLSX,XLT,XLTM,XLTX,XML,Z,ZIP"
},
"scan_extension_list":[
".\"\"",
".ACCDB",
".ARJ",
".BAT",
".BIN",
".BOO",
".CAB",
".CHM",
".CLA",
".CLASS",
".COM",
".CSC",
".DLL",
".DOC",
".DOCM",
".DOCX",
".DOT",
".DOTM",
".DOTX",
".DRV",
".EML",
".EXE",
".GZ",
".HLP",
".HTA",
".HTM",
".HTML",
".HTT",
".INI",
".JAR",
".JPEG",
".JPG",
".JS",
".JSE",
".LNK",
".LZH",
".MDB",
".MPD",
".MPP",
".MPT",
".MSG",
".MSO",
".NWS",
".OCX",
".OFT",
".OVL",
".PDF",
".PHP",
".PIF",
".PL",
".POT",
".POTM",
".POTX",
".PPAM",
".PPS",
".PPSM",
".PPSX",
".PPT",
".PPTM",
".PPTX",
".PRC",
".RAR",
".REG",
".RTF",
".SCR",
".SHS",
".SYS",
".TAR",
".VBE",
".VBS",
".VSD",
".VSS",
".VST",
".VXD",
".WML",
".WSF",
".XLA",
".XLAM",
".XLS",
".XLSB",
".XLSM",
".XLSX",
".XLT",
".XLTM",
".XLTX",
".XML",
".Z",
".ZIP",
".{*"
],
"scan_compressed":1,
"compress_layer_limit":2,
"condition":0,
"method":1,
"advanced":{
"scan_bottrap":1,
"scan_boot":0,
"enable_memory_scan":0,
"scan_floppy":0
}
}
}
},
"manual_scan":{
"settings":{
"action":{
"action_info":[
{
"second_action":2,
"threat":100,
"first_action":3
},
{
"second_action":4,
"threat":0,
"first_action":2
},
{
"second_action":4,
"threat":1,
"first_action":2
},
{
"second_action":2,
"threat":2,
"first_action":3
},
{
"second_action":0,
"threat":3,
"first_action":0
},
{
"second_action":4,
"threat":4,
"first_action":2
},
{
"second_action":4,
"threat":5,
"first_action":2
},
{
"second_action":2,
"threat":99,
"first_action":3
},
{
"second_action":2,
"threat":6,
"first_action":3
}
],
"virus_detection_method":0,
"scan_speed":0,
"backup_before_clean":1
},
"target":{
"scan_network_folder":0,
"exclusion":{
"exclude_extensions":[
"EVT",
"EVTX",
"LOG",
"OST",
"PST"
],
"exclude_trend_product":1,
"enabled":1,
"default_extensions":"\"\",ACCDB,ACE,AMG,ARJ,BAT,BIN,BOO,BOX,BZ2,CAB,CDR,CDT,CHM,CLA,CLASS,COM,CPT,CSC,DLL,DOC,DOCM,DOCX,DOT,DOTM,DOTX,DRV,DVB,DWG,DWT,EML,EPOC,EXE,GMS,GZ,HLP,HTA,HTM,HTML,HTT,INI,JAR,JPEG,JPG,JS,JSE,JTD,JTT,LNK,LZH,MDB,MPD,MPP,MPT,MSG,MSI,MSO,MST,NWS,OBD,OCX,OFT,OVL,PDF,PHP,PIF,PL,PM,POT,POTM,POTX,PPAM,PPS,PPSM,PPSX,PPT,PPTM,PPTX,PRC,QPW,RAR,REG,RTF,SCR,SHS,SHW,SIS,SIT,SWF,SYS,TAR,VBE,VBS,VSD,VSS,VST,VXD,WMF,WML,WPD,WPT,WSF,XLA,XLAM,XLS,XLSB,XLSM,XLSX,XLT,XLTM,XLTX,XML,Z,ZIP"
},
"scan_extension_list":[
".\"\"",
".ACCDB",
".ARJ",
".BAT",
".BIN",
".BOO",
".CAB",
".CHM",
".CLA",
".CLASS",
".COM",
".CSC",
".DLL",
".DOC",
".DOCM",
".DOCX",
".DOT",
".DOTM",
".DOTX",
".DRV",
".EML",
".EXE",
".GZ",
".HLP",
".HTA",
".HTM",
".HTML",
".HTT",
".INI",
".JAR",
".JPEG",
".JPG",
".JS",
".JSE",
".LNK",
".LZH",
".MDB",
".MPD",
".MPP",
".MPT",
".MSG",
".MSO",
".NWS",
".OCX",
".OFT",
".OVL",
".PDF",
".PHP",
".PIF",
".PL",
".POT",
".POTM",
".POTX",
".PPAM",
".PPS",
".PPSM",
".PPSX",
".PPT",
".PPTM",
".PPTX",
".PRC",
".RAR",
".REG",
".RTF",
".SCR",
".SHS",
".SYS",
".TAR",
".VBE",
".VBS",
".VSD",
".VSS",
".VST",
".VXD",
".WML",
".WSF",
".XLA",
".XLAM",
".XLS",
".XLSB",
".XLSM",
".XLSX",
".XLT",
".XLTM",
".XLTX",
".XML",
".Z",
".ZIP",
".{*"
],
"scan_compressed":1,
"compress_layer_limit":2,
"method":0,
"advanced":{
"scan_bottrap":1,
"scan_boot":1
}
}
}
},
"device_control":{
"enabled":0,
"exception_list":[
{
"item":"C:\\ex1.exe",
"type":0
}
],
"dac_item":[
{
"action":0,
"enabled":0,
"event":1
},
{
"action":0,
"enabled":0,
"event":5
}
]
},
"behavior_monitoring":{
"bhvs":{
"behaviors":[
{
"action":1,
"msg":{
"name":"Duplicated System File",
"description":"Many malicious programs create copies of themselves or other malicious programs using file names used by Windows system files. This is typically done to override or replace system files, avoid detection, or discourage users from deleting the malicious files.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to create a file using the name of a Windows system file. Most normal applications, except Windows patches, will not replace system files or use the same names.",
"event":11
},
"enabled":1,
"event":11
},
{
"action":2,
"msg":{
"name":"Hosts File Modification",
"description":"The Hosts file matches domain names with IP addresses. Many malicious programs modify the Hosts file so that the Web browser is redirected to infected, non-existent, or fake Web sites.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify the Hosts file. This change may cause your browser to get directed to an infected or fake Web site every time you access certain Web addresses. It can also prevent you from accessing certain Web sites.",
"event":2
},
"enabled":1,
"event":2
},
{
"action":0,
"msg":{
"name":"Suspicious Behavior",
"description":"Suspicious behavior can be a specific action or a series of actions that is rarely carried out by legitimate programs. Programs exhibiting suspicious behavior should be used with caution.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting some unexpected operations and can be harmful.",
"event":16
},
"enabled":1,
"event":16
},
{
"action":1,
"msg":{
"name":"New Internet Explorer Plugin",
"description":"Spyware programs often install unwanted Internet Explorer plugins, including toolbars and Browser Helper Objects.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to add a plugin to Internet Explorer. Plugins, such as toolbars or Browser Helper Objects, can add both desirable and unwanted features to Internet Explorer.",
"event":4
},
"enabled":1,
"event":4
},
{
"action":2,
"msg":{
"name":"Internet Explorer Setting Modification",
"description":"Many viruses and spyware programs change Internet Explorer settings, including the home page, trusted Web sites, proxy server settings, and menu extensions.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to configure Internet Explorer. This can result in changes to your home page, trusted Web sites, and other settings.",
"event":5
},
"enabled":1,
"event":5
},
{
"action":2,
"msg":{
"name":"Security Policy Modification",
"description":"Modifications in Windows Security Policy can allow unwanted applications to run and change system settings.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify the Windows Security Policy. Security Policy changes can leave the computer more vulnerable to different threats.",
"event":8
},
"enabled":1,
"event":8
},
{
"action":1,
"msg":{
"name":"Program Library Injection",
"description":"Many malicious programs configure Windows so that all applications automatically load a program library (DLL). This allows the malicious routines in the DLL to run every time an application starts.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to configure Windows so that a program library (DLL) is automatically loaded by some or all of your applications. If the DLL is malicious, this change can drastically affect your computer's security and stability.",
"event":3
},
"enabled":1,
"event":3
},
{
"action":1,
"msg":{
"name":"Shell Modification",
"description":"Many malicious programs modify Windows shell settings to associate themselves to certain file types. This routine allows malicious programs to launch automatically if users open the associated files in Windows Explorer. Changes to Windows shell settings can also allow malicious programs to track the programs used and start alongside legitimate applications.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to change the Windows Explorer shell settings, which determine the applications that open certain file types.",
"event":6
},
"enabled":1,
"event":6
},
{
"action":1,
"msg":{
"name":"New Service",
"description":"Windows services are processes that have special functions and typically run continuously in the background with full administrative access. Malicious programs sometimes install themselves as services to stay hidden.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to create a new service. Services typically run continuously in the background with full administrative access.",
"event":7
},
"enabled":1,
"event":7
},
{
"action":2,
"msg":{
"name":"System File Modification",
"description":"Certain Windows system files determine system behavior, including startup programs and screensaver settings. Many malicious programs modify system files to launch automatically at startup and control system behavior.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify Windows system files. These files can affect different settings, including whether certain applications run at startup.",
"event":10
},
"enabled":1,
"event":10
},
{
"action":1,
"msg":{
"name":"Firewall Policy Modification",
"description":"The Windows Firewall policy determines the applications that have access to the network, the ports that are open for communication, and the IP addresses that can communicate with the computer. Many malicious programs modify the policy to allow themselves to access to the network and the Internet.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to modify Windows Firewall settings. This may allow it or another application unhampered access to the network or the Internet.",
"event":9
},
"enabled":1,
"event":9
},
{
"action":0,
"msg":{
"name":"System Process Modification",
"description":"Many malicious programs perform various actions on built-in Windows processes. These actions can include terminating or modifying running processes.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to perform an unexpected action on a Windows process.",
"event":14
},
"enabled":1,
"event":14
},
{
"action":1,
"msg":{
"name":"New Startup Program",
"description":"Malicious applications usually add or modify autostart entries in the Windows registry to automatically launch every time the computer starts.",
"popup_templ":"$PIMAGE$ ($PID$) is attempting to allow itself or other applications to launch every time Windows starts.",
"event":1
},
"enabled":1,
"event":1
}
]
},
"approved_list":[
"C:\\Program Files\\MSN Messenger\\MSVS.exe"
],
"locale":"en-us",
"enabled":1,
"update_ts":1397618125,
"enable_adc":1,
"enable_dre":1,
"enable_intuit":0,
"enable_pem":0,
"enable_srp":1,
"enable_umh":1,
"block_list":[
"C:\\Program Files\\MSN Messenger\\MSVS_fake.exe"
],
"td":{
"enable_td":1,
"td_mode":1
}
},
"scheduled_scan":{
"settings":{
"action":{
"scan_speed":0,
"action_info":[
{
"second_action":2,
"threat":100,
"first_action":3
},
{
"second_action":4,
"threat":0,
"first_action":2
},
{
"second_action":4,
"threat":1,
"first_action":2
},
{
"second_action":2,
"threat":2,
"first_action":3
},
{
"second_action":0,
"threat":3,
"first_action":0
},
{
"second_action":4,
"threat":4,
"first_action":2
},
{
"second_action":4,
"threat":5,
"first_action":2
},
{
"second_action":2,
"threat":99,
"first_action":3
},
{
"second_action":2,
"threat":6,
"first_action":3
}
],
"virus_detection_method":0,
"backup_before_clean":1,
"display_virus_alert_msg":0,
"display_spyware_alert_msg":0
},
"target":{
"exclusion":{
"exclude_extensions":[
"EVT",
"EVTX",
"LOG",
"OST",
"PST"
],
"exclude_trend_product":1,
"enabled":1,
"default_extensions":"\"\",ACCDB,ACE,AMG,ARJ,BAT,BIN,BOO,BOX,BZ2,CAB,CDR,CDT,CHM,CLA,CLASS,COM,CPT,CSC,DLL,DOC,DOCM,DOCX,DOT,DOTM,DOTX,DRV,DVB,DWG,DWT,EML,EPOC,EXE,GMS,GZ,HLP,HTA,HTM,HTML,HTT,INI,JAR,JPEG,JPG,JS,JSE,JTD,JTT,LNK,LZH,MDB,MPD,MPP,MPT,MSG,MSI,MSO,MST,NWS,OBD,OCX,OFT,OVL,PDF,PHP,PIF,PL,PM,POT,POTM,POTX,PPAM,PPS,PPSM,PPSX,PPT,PPTM,PPTX,PRC,QPW,RAR,REG,RTF,SCR,SHS,SHW,SIS,SIT,SWF,SYS,TAR,VBE,VBS,VSD,VSS,VST,VXD,WMF,WML,WPD,WPT,WSF,XLA,XLAM,XLS,XLSB,XLSM,XLSX,XLT,XLTM,XLTX,XML,Z,ZIP"
},
"scan_extension_list":[
".\"\"",
".ACCDB",
".ARJ",
".BAT",
".BIN",
".BOO",
".CAB",
".CHM",
".CLA",
".CLASS",
".COM",
".CSC",
".DLL",
".DOC",
".DOCM",
".DOCX",
".DOT",
".DOTM",
".DOTX",
".DRV",
".EML",
".EXE",
".GZ",
".HLP",
".HTA",
".HTM",
".HTML",
".HTT",
".INI",
".JAR",
".JPEG",
".JPG",
".JS",
".JSE",
".LNK",
".LZH",
".MDB",
".MPD",
".MPP",
".MPT",
".MSG",
".MSO",
".NWS",
".OCX",
".OFT",
".OVL",
".PDF",
".PHP",
".PIF",
".PL",
".POT",
".POTM",
".POTX",
".PPAM",
".PPS",
".PPSM",
".PPSX",
".PPT",
".PPTM",
".PPTX",
".PRC",
".RAR",
".REG",
".RTF",
".SCR",
".SHS",
".SYS",
".TAR",
".VBE",
".VBS",
".VSD",
".VSS",
".VST",
".VXD",
".WML",
".WSF",
".XLA",
".XLAM",
".XLS",
".XLSB",
".XLSM",
".XLSX",
".XLT",
".XLTM",
".XLTX",
".XML",
".Z",
".ZIP",
".{*"
],
"scan_compressed":1,
"compress_layer_limit":2,
"method":0,
"advanced":{
"scan_bottrap":1,
"scan_boot":1
}
}
}
},
"mail_scan":{
"enable_realtime_scan":0,
"enable_toolbar":0
},
"client_privileges":{
"scan_settings":{
"display_realtime_scan_tab":0,
"display_scheduled_scan_tab":0,
"allow_enable_scheduled_scan":0,
"allow_stop_scheduled_scan":0,
"enable_scheduled_scan_warning":0,
"display_manual_scan_tab":0,
"allow_postpone_scheduled_scan":0
},
"wtp":{
"continue_browsing":0,
"allow_edit_approved_url_list":0
},
"firewall":{
"enable_switching":0,
"display_tab":0
},
"behavior_monitoring":{
"display_tab":0
},
"url_filtering":{
"continue_browsing":0
},
"mail_scan":{
"allow_configure":0
},
"update_settings":{
"disable_upgrade":0
},
"client_security":{
"degree":1
}
},
"url_filtering":{
"business_hours_2":{
"type":3,
"time_slots":[
0,
0,
16515072,
4092,
16515072,
4092,
16515072,
4092,
16515072,
4092,
16515072,
4092,
0,
0
]
},
"business_hours":{
"days":{
"wed":1,
"sun":0,
"thu":1,
"tue":1,
"mon":1,
"fri":1,
"sat":0
},
"afternoon":{
"enabled":1,
"time_range":{
"range_to":64800,
"range_from":46800
}
},
"timeofday_type":1,
"morning":{
"enabled":1,
"time_range":{
"range_to":43200,
"range_from":32400
}
}
},
"filter_rules":{
"categories":[
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":1
},
{
"enable_business_hour":1,
"enable_leisure_hour":1,
"rule_id":2
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":3
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":4
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":5
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":6
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":8
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":9
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":10
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":11
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":14
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":15
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":16
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":25
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":26
}
],
"uc_type":1
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":21
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":31
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":32
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":45
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":58
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":59
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":60
}
],
"uc_type":2
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":24
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":40
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":41
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":42
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":50
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":51
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":52
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":53
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":89
}
],
"uc_type":3
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":27
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":34
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":35
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":36
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":37
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":38
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":46
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":48
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":49
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":67
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":90
}
],
"uc_type":4
},
{
"rules":[
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":39
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":73
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":74
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":75
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":76
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":77
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":78
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":79
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":80
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":81
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":82
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":83
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":84
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":85
},
{
"enable_business_hour":1,
"enable_leisure_hour":0,
"rule_id":86
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":88
}
],
"uc_type":5
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":18
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":19
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":20
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":22
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":29
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":30
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":33
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":44
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":47
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":54
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":55
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":61
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":62
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":63
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":64
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":65
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":66
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":68
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":87
}
],
"uc_type":6
},
{
"rules":[
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":23
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":43
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":56
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":57
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":69
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":70
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":71
},
{
"enable_business_hour":0,
"enable_leisure_hour":0,
"rule_id":72
}
],
"uc_type":7
}
]
},
"enabled":1,
"level":3
},
"ts_toolbar":{
"enable_keystroke_encryption":0,
"enable_page_rating":0,
"enable_wifi_advisor":0
},
"approved_blocked_url":{
"enabled":0,
"approved":{
"urls":[
"http://www.trendmicro.com/*",
"http://wustat.windows.com/*",
"http://windowsupdate.microsoft.com/*",
"http://uk.trendmicro-europe.com/*",
"http://servicecenter.antivirus.com/*",
"http://office.microsoft.com/*",
"http://kb.trendmicro.com/*",
"http://housecall.antivirus.com/*",
"http://download.windowsupdate.com/*",
"http://download.microsoft.com/*",
"http://c.microsoft.com/*",
"http://support.apple.com/*/downloads/*",
"http://support.apple.com/downloads/*",
"http://supportdownload.apple.com/*",
"http://swupdate.apple.com/*"
]
}
}
},
"gid":[
1
],
"type":1
}
],
"eid":"6FA6C13D-04B9-4FBC-B181-9B8AF75AD801"
}
]
}
Name |
Type |
Description |
Length |
|---|---|---|---|
paging.total |
integer |
The total number of groups |
|
paging.limit |
integer |
The number of groups per page |
1 to 100 |
paging.page |
integer |
Current page number |
1 to max |
customers[].count |
integer |
The total number of groups |
|
customers[].eid |
string |
For internal use only |
GUID |
customers[].id |
string |
Customer company ID |
GUID |
customers[].policies[].gid[] |
integer |
Group ID |
|
customers[].policies[].policy |
object |
For Windows, please refer to Windows' Policy page For Mac, please refer to Mac's Policy page For Android, please refer to Android's Policy page For iOS, please refer to iOS' Policy page |
|
customers[].policies[].type |
integer |
Device type |
1 = Server, 2 = Desktop, 3 = Mixed |