Trend Micro InterScan M Series, Руководство администратора

Страница: 75 / 480

How InterScan Gateway Security Appliance Works
3
-
15
When InterScan Gateway Security Appliance detects spyware or grayware in a
specific protocol, it will take the action that the administrator has defined for that
protocol. InterScan Gateway Security Appliance will then send a notification email
to all persons specified in the Notification section for the specific protocol.
InterScan Gateway Security Appliance writes spyware and grayware detections to
the anti-spyware/grayware log. You can export the contents of the spyware/grayware
log for inclusion in reports.
InterScan Gateway Security Appliance uses the following components when
scanning for spyware:
• Trend Micro Spyware scan engine and pattern file
• Spyware/Grayware Exclusion List
Anti-Phishing
Because the Internet fraud known as phishing has become an increasing problem on
the Internet, Trend Micro designed the anti-phishing function in InterScan Gateway
Security Appliance to protect LAN users from inadvertently giving away sensitive
information as part of a phishing attack. Anti-phishing monitors:
• Outbound client URL requests
• Email messages that contain links to phishing sites.
InterScan Gateway Security Appliance writes phishing events to the phishing log.
You can export the log for inclusion in reports.
InterScan Gateway Security Appliance uses the following components to check for
phishing:
• Trend Micro Anti-Spam Engine
• URL rating database
Because the incidence of phishing fraud is growing rapidly and the format continues
to evolve, it is especially important to keep the spam pattern file up to date. Trend
Micro recommends that you schedule frequent updates and set email notifications to
let you know the status of scheduled updates. Check the version of the spam pattern
file you are running and time of last update on the Summary screen.