OfficeScan 10 Administrator's Guide - Online Help Home - Trend Micro

Using the OfficeScan Firewall
WARNING! Test OfficeScan client program settings in a controlled environment only.
Do not perform tests on client computers connected to the network or to
the Internet. Doing so may expose client computers to viruses, hacker
attacks, and other risks.
To test the firewall:
1. Create and save a test policy. Configure the settings to block the types of traffic you
want to test. For example, to prevent the client from accessing the Internet, do the
following:
a. Set the security level to Low (allow all inbound/outbound traffic).
b. Select Enable firewall and Notify users when a firewall violation occurs.
c. Create an exception that blocks HTTP (or HTTPS) traffic.
2. Create and save a test profile, selecting the clients to which you will test firewall
features. Associate the test policy with the test profile.
3. Click Assign Profile to Clients.
4. Verify the deployment.
a. Click Networked Computers > Client Management.
b. Select the domain to which a client belongs.
c. Select Firewall view from the client tree view.
d. Check if there is a green check mark under the Firewall column of the client
tree. If you enabled the Intrusion Detection System for that client, check that a
green check mark also exists in the IDS column.
e. Verify if the client applies the correct firewall policy. The policy appears under
the Firewall Policy column in the client tree.
5. Test the firewall on the client computer by attempting to send or receive the type of
traffic you configured in the policy.
6. To test a policy configured to prevent the client from accessing the Internet, open a
Web browser on the client computer. If you configured OfficeScan to display a
notification message for firewall violations, the message displays on the client
computer when an outbound traffic violation occurs.
7-19