OfficeScan 10 Administrator's Guide - Online Help Home - Trend Micro

Using the OfficeScan Firewall
The following steps are necessary to successfully use the OfficeScan firewall:
1. Create a policy. The policy allows you to select a security level that blocks or allows
traffic on networked computers and enables firewall features.
2. Add exceptions to the policy. Exceptions allow clients to deviate from a policy.
With exceptions, you can specify clients, and allow or block certain types of traffic,
despite the security level setting in the policy. For example, block all traffic for a set
of clients in a policy, but create an exception that allows HTTP traffic so clients can
access a Web server.
3. Create and assign profiles to clients. A firewall profile includes a set of client
attributes and is associated with a policy. When a client matches the attributes
specified in the profile, the associated policy is triggered.
Firewall Policies
Firewall policies allow you to block or allow certain types of network traffic not
specified in a policy exception. A policy also defines which firewall features get enabled
or disabled. Assign a policy to one or multiple firewall profiles.
OfficeScan comes with a set of default policies, which you can modify or delete.
The default firewall policies are as follows:
TABLE 7-40. Default firewall policies
POLICY
NAME
SECURITY
LEVEL
CLIENT
SETTINGS
All access Low Enable
firewall
Cisco Trust
Agent for
Cisco NAC
Low Enable
firewall
EXCEPTIONS
RECOMMENDED
USE
None Use to allow
clients
unrestricted
access to the
network
Allow incoming
and outgoing
UDP traffic
through port
21862
Use when
clients have a
Cisco Trust
Agent (CTA)
installation
7-5