OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Using the OfficeScan Firewall
• Fragmented IGMP: A Denial of Service attack that sends fragmented IGMP
packets to a target computer, which cannot properly process the IGMP packets.
This can freeze or slow down the computer.
• LAND Attack: A type of attack that sends IP synchronization (SYN) packets with
the same source and destination address to a computer, causing the computer to
send the synchronization acknowledgment (SYN/ACK) response to itself. This can
freeze or slow down the computer.
Firewall Violation Outbreak Monitor
The OfficeScan firewall sends a customized notification message to specified recipients
when firewall violations exceed certain thresholds, which may signal an attack.
Client Firewall Privileges
Grant client users the privilege to view their firewall settings on the OfficeScan client
console. Also grant users the privilege to enable or disable the firewall, the Intrusion
Detection System, and the firewall violation notification message.
Enabling or Disabling the OfficeScan Firewall
During the OfficeScan server installation, you are prompted to enable or disable the
OfficeScan firewall.
If you enabled the firewall during installation and noticed an impact on performance,
especially on server platforms (Windows Server 2003 and Windows Server 2008),
consider disabling the firewall.
If you disabled the firewall during installation but now want to enable it to protect an
endpoint from intrusions, first read the guidelines and instructions in Client Services on
page 13-6.
You can enable or disable the firewall on all or select client computers.
11-5