Trend Micro InterScan M Series, Administrator'S Manual

Page: 76 / 480

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Administrator’s Guide
3
-
16
From the main InterScan Gateway Security Appliance menu, click Update >
Schedule and then choose an update frequency. Trend Micro recommends having
InterScan Gateway Security Appliance check for updates at least once a day.
Anti-Pharming
As noted in the introduction to this chapter, the fraud known as pharming has become
an increasingly treacherous way to commit identity theft on the Internet. Therefore,
Trend Micro has designed the anti-pharming feature to protect LAN users from inad-
vertently giving away sensitive information as part of a pharming event.
The anti-pharming function in InterScan Gateway Security Appliance monitors
outbound client URL requests and compares them to a list of known pharming sites.
If the URL of the requested site matches any of the URLs on the list, InterScan
Gateway Security Appliance takes the action defined in the Action section of the
HTTP Anti-Pharming screen. If enabled, InterScan Gateway Security Appliance
sends a notification email to the administrator. A notification message also appears
on the user's browser explaining that InterScan Gateway Security Appliance has
blocked access to the site for security reasons.
InterScan Gateway Security Appliance writes pharming events to the Anti-Pharming
log. You can export the contents of the log for inclusion in reports.
InterScan Gateway Security Appliance uses a URL rating database to check for
pharming.
URL Filtering
Many companies have corporate policies that prohibit access to certain kinds of Web
sites that the company considers offensive or in violation of company ethics. Trend
Micro has designed the URL filtering function to prevent users from accessing such
sites. URL filtering filters access to Web sites based on administrator-defined settings.
When a user requests access to a URL, InterScan Gateway Security Appliance
checks the URL against the Trend Micro URL rating database. After the URL
database returns a rating, InterScan Gateway Security Appliance checks the URL
against the administrator-defined allowable categories. If the rating returned by the
URL rating database matches one of the predefined categories set by the
administrator, InterScan Gateway Security Appliance denies access to the Web site.