SonicWALL 4.5 Select a spyware protection mode, Mode, Behavior of protection service, Report

Enforced Client Product Guide	Using the Virus and Spyware Protection Service
	Configuring policies for virus and spyware protection

Select a spyware protection mode

You can specify how the virus and spyware protection service responds to detections of potentially unwanted programs on client computers.

„Protect: It attempts to clean the detected item. If the item cannot be cleaned, a copy of the item is placed in a quarantine folder and the original item is deleted.

„Prompt: It displays a dialog box with information about the detection, and allows the user to select a course of action. This option is the default.

„Report: It reports detections to the SecurityCenter and takes no additional action.

For all modes, detections are reported to the SecurityCenter, where you can view information about them in reports.

To prevent popup prompts from appearing on client computers when threats are detected, and for highest security, we recommend using Protect mode.

4

To specify a response to potentially unwanted program detections:

1On the Groups + Policies page, click Add Policy (or click Edit to modify an existing policy).

2Click the Spyware Protection tab, select a Spyware Protection Mode, then click Save.

Use the following table to determine how policy options are implemented in the different protection modes.

Mode	Behavior of protection service
Report	„ No user prompts.
	„ Detections reported to SecurityCenter.
	„ Administrator can select approved programs, which are not reported as
	detections.
	„ Can be used as a Learn mode.
Prompt	„ Users prompted about detections.
	„ Detections reported to SecurityCenter.
	„ Administrator can select approved programs. These programs are not reported
	as detections, and users are not prompted for a response to them.
	„ Users can approve additional programs in response to prompts. These are
	reported to SecurityCenter.
Protect	„ Users not prompted about detections.
	„ Users notified about deleted or quarantined programs.
	„ Detections reported to SecurityCenter.
	„ Administrator can select approved programs. These programs are not reported
	as detections.
	If the policy is changed from Prompt mode to Protect mode or Report mode, the virus and
	spyware protection service saves user settings for approved programs. If the policy is then
	changed back to Prompt mode, these settings are reinstated.

99