Setting anti-virus policy
13
Administrators can standardize virus protection settings over the network
by locking configuration settings on the Norton AntiVirus clients. Network
users cannot change settings for locked items. By standardizing virus
protection settings, an administrator can protect the network against virus
invasions without slowing the normal performance of the network.
Setting anti-virus policy
Norton AntiVirus provides two types of protection: File System Realtime
Protection, which constantly monitors files for infection as they are
accessed or modified, and scans that can be initiated on demand,
scheduled to run unattended, or invoked automatically at system startup.
In both cases, there are two basic configuration components:
■
What to scan
■
What to do if a virus is detected
Choosing what to scan
Norton AntiVirus File System Realtime Protection scans all file types by
default. Manual, scheduled, custom, and startup scans also examine all file
types by default. You can choose to scan files by file extension or by type
of file (documents and programs) but your protection from viruses is
reduced.
What to do if a virus is detected
Norton AntiVirus responds to infected files with actions and backup
actions. By default, when a virus is detected by either Realtime Protection
or during a scan, Norton AntiVirus attempts to clean the virus from the
infected file. If Norton AntiVirus cannot clean the file, the backup action is
to move the infected file to the Quarantine so that the virus cannot spread.
Depending on your anti-virus policy, you can change these settings to
delete on detection or leave alone (log only). For File System Realtime
Protection, you can also choose to deny access. In addition, you can set
different actions for macro and nonmacro viruses for each scan type
separately.
