Intrusion Defense Firewall 1.2 User's Guide - Trend Micro? Online ...

Computer Details
The Computer's Details window mirrors the main interface of the IDF Server Plug-in. It displays includes
all the settings and configurations that can be changed to override any settings and configurations.
Computer Information Screen
General
Hostname: The name must be either the IP address of the Computer or the hostname of the
Computer. (Either a fully qualified hostname or a relative hostname may be used if a hostname is
used instead of an IP address.)
Description: a description of the Computer.
Platform: Details of the Computer's OS will appear here.
Domain: The Domain to which the Computer belongs appears in the drop-down list. You can
reassign the Computer to any other existing Domain.
Security Profile: The Security Profile (if any) that has been assigned to this Computer.
Keep in mind that if you unassign a Security Profile from a Computer, Rules may still be in effect
on the Computer if they were assigned independently of the Security Profile.
Asset Importance: IDF Server Plug-in uses a ranking system to quantify the importance of
Security Events. Rules are assigned a Severity Level (high, medium, low, etc.), and Assets
(Computers) are assigned an "Asset Importance" level. These levels have numerical values.
When a Rule is triggered on a Computer the Asset Importance value and the Severity Level value
are multiplied together. This produces a score which is used to sort Events by importance. (Event
ranking can be seen on the Events screens.) Use this Asset Importance drop-down list to
assign an Asset Importance level to this Computer. (To edit the numerical values associated with
severity and importance levels, go to System > System Settings > Ranking.)
Lock Computer (Prevents all communication with client plug-in): Checking this blocks all
communications between the Client Plug-in and the Server Plug-in. The Computer's Security
Profile is still active (all rules are still applied to all traffic), but should any alerts be generated,
they will not be sent to the Server Plug-in.
You may wish to lock out a Computer if you are going to perform some maintenance on it and
don't want a series of alerts to appear in the Server Plug-in.
Status
Computer Status:
o When the Computer is unmanaged the status represents the state of the Client Plug-in
with respect to activation. The status will display either "Discovered" or "New" followed
by the Client Plug-in state in brackets ("No Client Plug-in", "Unknown", "Client Plug-in
Reactivate Required", "Client Plug-in Activate Required", or "Client Plug-in Deactivate
Required").
o When the Computer is managed and no Computer errors are present, the status will
display "Managed" followed by the state of the Client Plug-in in brackets ("Client Plug-in
Online" or "Client Plug-in Offline").
o When there are errors on the Computer (e.g., "Client Plug-in Offline", "Client Plug-in
Update Failed", etc.) the status will display the error. When more than one error is
present, the status will display "Multiple Errors" and each error will be listed beneath.
Client Plug-in: Indicates whether the Server Plug-in can communicate with the Client Plug-in.
© Copyright 2010 Trend Micro Inc. www.trendmicro.com
All rights reserved. - 19 -