F-SECURE ANTI-VIRUS FOR MICROSOFT EXCHANGE 9.00, Administrator'S Manual

Page: 32 / 174

Firewall Security Levels Table (Global)
This table displays the security levels that are available globally in the system. The security levels table is
the same for all policy domains, but enabling and disabling individual security levels can be done per policy
domain.
Network Quarantine
In this section you can:
• Turn network quarantine on or off.
• Specify the virus definitions age, after which Network Quarantine is activated.
• Specify whether turning real-time scanning off on the host activates Network Quarantine .
Intrusion Prevention
In this section you can:
• Turn intrusion prevention on or off.
• Select the action to take when a malicious packet is detected. The options available are:
• Log and drop.
• Log without dropping.
• Define the centralized alert severity.
• Define the alert and performance level.
Firewall rules
This page is used to define the rules applied to the different firewall security levels.
Firewall Rules Table
This table lists the rules defined for different security levels. You can select the level from the Internet Shield
security level being edited drop-down menu. When the selected security level is changed, the rules associated
with the new security level are displayed in the table.
When the firewall is in use, the firewall rules are checked in the order in which they are displayed in the table,
from top to bottom. For security levels with the
Normal filtering mode, it is possible to define domain or
host-specific rules. When Allow users to define new rules is selected, the end users are also allowed to
define new rules for that security level. The table also displays the location for these rules.
The Firewall Rules table displays the following information for each rule:
• Whether the rule is turned on or off
• The name and comment for the rule
• The type of rule (allow/deny)
• The related service and direction: <= for an inbound service, => for an outbound service and <=> for a
bidirectional service.
• The affected remote hosts
• Whether alert sending is turned on or off
• Whether the rule is applied only when a dialup link is used.
To move the location where user-defined new rules are placed in the table, click User defined rules go here .
You can then use the Move Up and Move Down buttons to move where the slot in the table.
In addition, Application control will automatically create rules on the host for applications that have been
allowed. The rules are placed just before the first Deny rest rule in the rules table, which is the first deny rule
with the All traffic service and Any remote host. The rules allow incoming packets to server applications,
32 | F-Secure Client Security | Anti-virus mode user interface