User Guide
27
Using ActiveShield
3
Click
Enable WormStopper (recommended)
(
Figure 2-2
).
By default, the following detailed options are enabled:
Pattern matching to detect suspect activity
Alerting when e-mail is sent to 40 or more recipients
Alerting when 5 or more e-mails are sent within 30 seconds
NOTE
If you modify the number of recipients or seconds for
monitoring sent e-mails, it might result in invalid detections.
McAfee recommends that you click
No
to retain the default
setting. Otherwise, click
Yes
to change the default setting to
your setting.
This option can be automatically enabled after the first time a potential worm
is detected (see
Managing potential worms
on page 33
for details):
Automatic blocking of suspect outbound e-mails
Figure 2-2. Advanced ActiveShield Options - E-mail tab
