Symantec 20032623 - Endpoint Protection Small Business Edition, Руководство по внедрению

Страница: 189 / 351

3 Configure any of the following options:
Insight allows scans to skip trusted good files.
The scan can skip the files that Symantec trusts
as good (more secure) or that the community
trusts as good (less secure). Insight
Bloodhound isolates and locates the logical
regions of a file to detect a high percentage of
unknown viruses. Bloodhound then analyzes the
program logic for virus-like behavior. You can
specify how the sensitivity for detection. Bloodhound
4 Click OK.
Customizing Download Insight settings
You might want to customize Download Insight settings to decrease false positive
detections on client computers. You can change how sensitive Download Insight
is to the file reputation data that it uses to characterize malicious files. You can
also change the notifications that Download Insight displays on client computers
when it makes a detection.
See “Customizing the virus and spyware scans that run on Windows computers”
on page 180.
See “Managing Download Insight detections” on page 165.
To customize Download Insight settings
1
In the console, open a Virus and Spyware Protection policy and select
Download Protection.
2 On the Download Insight tab, make sure that Enable Download Insight to
detect potential risks in downloaded files based on file reputation is checked.
If Auto-Protect is disabled, Download Insight cannot function even if it is
enabled.
3 Move the slider for malicious file sensitivity to the appropriate level.
If you set the level higher, Download Insight detects more files as malicious
and fewer files as unproven. Higher settings, however, return more false
positives.
4 Check or uncheck the following options to use as additional criteria for
examining unproven files:
■
Files with fewer than x users
189 Customizing scans
Customizing Download Insight settings