McAfee UTILITIES 4.0 Guide de l'utilisateur télécharger pdf (Page 65)

Working with Quarantine Rules policies

The Quarantine Rules policy is a special set of firewall rules that is enforced when quarantine

mode is enabled. You create and manage quarantine rules by applying a Quarantine Rules

policy with the appropriate settings.

NOTE: If users connect to the network using VPN software, make certain that quarantine rules

allow any traffic required to connect and authenticate over the VPN. You can use the regular

Firewall feature to determine which VPN-related rules you need for quarantine mode. Enable

the firewall’s learn mode or adaptive mode, and then connect using VPN software. Host Intrusion

Prevention automatically generates relevant VPN rules, which you can then reproduce in your

quarantine rules.

This policy category contains a preconfigured default policy and an editable My Default policy.

You can view and duplicate the preconfigured policy; you can edit, rename, duplicate, delete,

and export editable custom policies.

On the Policy Catalog policy list page, click New Policy to create a new custom policy; click

Duplicate under Actions to create a new custom policy based on an existing policy.

Change the policy’s assignment on the Policy Assignment page. For a group, go to Systems

| System Tree, select a group, and then on the Policies tab click Edit Assignment. For a

system go to Systems | System Tree, select a group that contains the system, and then on

the System tab, select the system and select More Actions | Modify Policies on a Single

System.

Tasks

Configuring the Quarantine Rules policy

Creating and editing quarantine rules

Creating quarantine rule groups

Adding predefined quarantine rules

Configuring the Quarantine Rules policy

Create new policies or edit existing policies by adding or removing rules, or moving rules between

policies. View and edit rules from the Quarantine Rules page.

Task

For option definitions, click ? on the page displaying the options.

1 On the Policy Catalog page, select Host Intrusion Prevention: Firewall on the Product

list and select Quarantine Rules on the Category list. The list of policies appears.

Configuring Firewall Policies

Working with Quarantine Rules policies

65McAfee Host Intrusion Prevention 7.0 Product Guide for use with ePolicy Orchestrator 4.0

1 2 ... 60 61 62 63 64 65 66 67 68 69 70 ... 111 112

Pas de commentaire

McAfee UTILITIES 4.0 Guide de l'utilisateur Page 65