Symantec 20032623 - Endpoint Protection Small Business Edition, Руководство по внедрению

Страница: 167 / 351

Table 11-15
Managing Download Insight detections (continued)
Description Task
You can create an exception for an application that your users download.
You can also create an exception for a specific Web domain that you believe
is trustworthy.
See “Specifying how Symantec Endpoint Protection Small Business Edition
handles an application that scans detect or that users download” on page 247.
See “Excluding a trusted Web domain from scans” on page 247.
Note:
If your client computers use a proxy with authentication, you must
specify trusted Web domain exceptions for Symantec URLs. The exceptions
let your client computers communicate with Symantec Insight and other
important Symantec sites.
For information about the recommended exceptions, see the related
Technical Support Knowledge Base article .
By default, Download Insight does not examine any files that users download
from a trusted Internet or intranet site. You configure trusted sites and
trusted local intranet sites on the Windows Control Panel > Internet
Options > Security tab. When the Automatically trust any file downloaded
from an intranet site option is enabled, Symantec Endpoint Protection
Small Business Edition allows any file that a user downloads from any sites
in the lists.
Note:
Download Insight recognizes only explicitly configured trusted sites.
Wildcards are allowed, but non-routable IP address ranges are not
supported. For example, Download Insight does not recognize 10.*.*.* as a
trusted site. Download Insight also does not support the sites discovered
by the Internet Options > Security > Automatically detect intranet
network option.
Create exceptions for specific files or
Web domains
Download Insight requires reputation data from Symantec Insight to make
decisions about files. If you disable Insight lookups, Download Insight runs
but detects only the files with the worst reputations. Insight lookups are
enabled by default.
See “Enabling or disabling client submissions to Symantec Security
Response” on page 172.
Make sure that Insight lookups are
enabled
167 Managing Virus and Spyware Protection
Managing Download Insight detections