SonicWALL 4.5 Frozen Dessert Maker User Manual


 
100
Enforced Client Product Guide Using the Virus and Spyware Protection Service
Configuring policies for virus and spyware protection
4
Learn mode
Report mode can be used as a “learn mode” to help you determine which programs to approve
(see
Specify approved programs on page 101). In Report mode, the virus and spyware protection
service tracks but does not delete unrecognized programs. You can review detected programs in
the
Unrecognized Programs report (see View unrecognized programs on page 105) and approve
those that are appropriate for your policy. When you no longer see programs you want to
approve in the report, change the policy setting to
Prompt or Protect mode.
Specify approved programs
On client computers, the virus and spyware protection service maintains a list of approved
programs that are not identified as potentially unwanted programs. You can configure the list of
approved programs for all computers using a policy. In addition, users can approve programs for
individual client computers when the firewall protection service is set to
Prompt mode.
To configure approved programs in a policy:
1 On the Groups + Policies page, click Add Policy (or click Edit to modify an existing policy).
2 Click the Spyware Protection tab.
3 Under Approved Programs, select the type of program (a detected program or a user-approved
program).
4 Select a program, then click Save.
The selected program is added to the list of allowed programs. (No list appears until you have
added at least one approved program to the policy.)
Tip
To remove an approved program from a policy:
1 On the Groups + Policies page, click Add Policy (or click Edit to modify an existing policy).
2 Click the Spyware Protection tab.
3 In the list of Approved Programs, click remove for each program you want to delete from the
list, then click
Save.
Set advanced spyware protection options
On the Groups + Policies page, use the Advanced Settings tab to select the types of potentially
unwanted programs to search for during scans.
Caution
Exclude only programs you know are safe. If you are unsure about a program, we recommend
not adding it to the approved programs list.
Use the Unrecognized Programs report to view a complete listing of all programs detected on
client computers.
Threat type Description
Jokes
Programs designed to be mistaken for a virus. They might alarm or annoy a
user but do not harm files or data. They are intended to waste time and
resources.
Remote admin tools
Programs that can be used from a remote location to access a computer.
Some remote administration tools serve useful purposes, such as allowing
users to access their files from home, but others can be used by unauthorized
persons to monitor user activities and take control of a computer.