OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
7-6
Behavior Monitoring Exception List
The Behavior Monitoring exception list contains programs that are not monitored by
Behavior Monitoring.
• Approved Programs: Programs in this list can be run. An approved program will
still be checked by other OfficeScan features (such as file-based scanning) before it
is finally allowed to run.
• Blocked Programs: Programs in this list can never be started. To configure this list,
Event Monitoring should be enabled.
Configure the exception list from the web console. You can also grant users the privilege
to configure their own exception list from the client console. For details, see Behavior
Monitoring Privileges on page 7-9.
To configure Malware Behavior Blocking, Event Monitoring, and the exception
list:
PATH: NETWORKED COMPUTERS > CLIENT MANAGEMENT
1. In the client tree, click the root domain icon
specific domains or clients.
to include all clients or select
2. Click Settings > Behavior Monitoring Settings.
3. Select Enable Malware Behavior Blocking.
4. Configure Event Monitoring settings.
a. Select Enable Event Monitoring.
b. Choose the system events to monitor and select an action for each of the
selected events. For information about monitored system events and actions,
see Event Monitoring on page 7-2.