Internet Security Systems 3.5, Desktop Protector manual Protection Levels

Protection Levels

Protection Levels

Introduction	Protection levels are pre-designed sets of security settings developed for different types of
	Web use. You can choose to have Desktop Protector block all communications with your
	system, some communications with your system, or no communications with your
	system. You can change protection levels at any time.
How protection	Protection levels modify your firewall by closing some of the software links, or ports, that
levels work	your system uses to receive communications from other computers. The more restrictive
	the protection level, the more ports are blocked.
Protection level	Paranoid: Desktop Protector blocks all unsolicited inbound traffic. Very restrictive, but
definitions	useful if your system faces frequent or repeated attacks. This setting may restrict some
	Web browsing and interactive content.
	Nervous: Desktop Protector blocks all unsolicited inbound traffic except for some
	interactive content on Web sites (such as streaming media and other application-specific
	uses of the Internet). Preferable if you are experiencing frequent intrusions.
	Cautious: Desktop Protector blocks unsolicited network traffic that accesses operating
	system and networking services. Good for regular use of the Internet.
	Trusting: All ports are open and unblocked and all inbound traffic is allowed. Acceptable
	if you have a minimal threat of intrusions. This is the default protection level setting. If
	your local agent is not centrally controlled by ICEcap Manager, you should consider
	customizing your protection level immediately after installing Desktop Protector.
How protection	This table shows how the protection levels affect some representative applications:

levels affect
applications
	Level	Blocked	Configurable	Not Blocked
	Paranoid	IRC file transfer (DCC)	Quake (II/III)	FTP file transfers
		NetMeeting	Internet Phone	Sending/receiving email
		PC Anywhere	Net2Phone	Real Audio
		ICQ		IRC Chat
	Nervous	IRC file transfer (DCC)	ICQ	All of the above, plus PC
		NetMeeting	Internet Phone	Anywhere, Quake (II,III)
			Net2Phone
	Cautious	Unsolicited traffic that	None	All of the above, plus IRC
		accesses operating		file transfer (DCC)
		system and networking		NetMeeting
		services
	Trusting	None	None	All inbound traffic

Note: To use an application that is blocked under a selected protection level, use the Advanced Firewall Settings feature to open the ports the application uses. For more information on opening ports, see “Blocking Intrusions” on page 37.

3