SonicWALL 4.5 Frozen Dessert Maker User Manual


 
99
Enforced Client Product Guide Using the Virus and Spyware Protection Service
Configuring policies for virus and spyware protection
4
Select a spyware protection mode
You can specify how the virus and spyware protection service responds to detections of
potentially unwanted programs on client computers.
Protect: It attempts to clean the detected item. If the item cannot be cleaned, a copy of the
item is placed in a quarantine folder and the original item is deleted.
Prompt: It displays a dialog box with information about the detection, and allows the user to
select a course of action. This option is the default.
Report: It reports detections to the SecurityCenter and takes no additional action.
For all modes, detections are reported to the SecurityCenter, where you can view information
about them in reports.
Tip
To specify a response to potentially unwanted program detections:
1 On the Groups + Policies page, click Add Policy (or click Edit to modify an existing policy).
2 Click the Spyware Protection tab, select a Spyware Protection Mode, then click Save.
Use the following table to determine how policy options are implemented in the different
protection modes.
Note
To prevent popup prompts from appearing on client computers when threats are detected, and
for highest security, we recommend using
Protect mode.
Mode Behavior of protection service
Report No user prompts.
Detections reported to SecurityCenter.
Administrator can select approved programs, which are not reported as
detections.
Can be used as a Learn mode.
Prompt
Users prompted about detections.
Detections reported to SecurityCenter.
Administrator can select approved programs. These programs are not reported
as detections, and users are not prompted for a response to them.
Users can approve additional programs in response to prompts. These are
reported to SecurityCenter.
Protect Users not prompted about detections.
Users notified about deleted or quarantined programs.
Detections reported to SecurityCenter.
Administrator can select approved programs. These programs are not reported
as detections.
If the policy is changed from Prompt mode to Protect mode or Report mode, the virus and
spyware protection service saves user settings for approved programs. If the policy is then
changed back to
Prompt mode, these settings are reinstated.