OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
11-12
To modify an existing policy:
PATH: NETWORKED COMPUTERS > FIREWALL > POLICIES
1. Click a policy.
2. Modify the following:
• Policy name
• Security level
• Firewall features to use for the policy
• Certified Safe Software Service List status
• Firewall policy exceptions to include in the policy
• Edit an existing policy exception (click the policy exception name and
change settings in the page that opens)
• Click Add to create a new policy exception. Specify the settings in the page
that opens.
3. Click Save to apply the modifications to the existing policy.
Editing the Firewall Exception Template
The firewall exception template contains policy exceptions that you can configure to
allow or block different kinds of network traffic based on the client computer's port
number(s) and IP address(es). After creating a policy exception, edit the policies to
which the policy exception applies.
Decide which type of policy exception you want to use. There are two types:
Restrictive
Blocks only specified types of network traffic and applies to policies that allow all
network traffic. An example use of a restrictive policy exception is to block client ports
vulnerable to attack, such as ports that Trojans often use.
Permissive
Allows only specified types of network traffic and applies to policies that block all
network traffic. For example, you may want to permit clients to access only the
OfficeScan server and a web server. To do this, allow traffic from the trusted port (the
port used to communicate with the OfficeScan server) and the port the client uses for
HTTP communication.