User manual ALCATEL-LUCENT ICS DISSOLVABLE AGENT FOR SAFEGUARD

[. . . ] ICS Dissolvable Agent for SafeGuard Alcatel-Lucent Release 2. 2 ICS Release 4. 0 Administration Guide PART NUMBER: 005-0030 REV A1 PUBLISHED: MARCH 2007 ALCATEL-LUCENT 26801 WEST AGOURA ROAD CALABASAS, CA 91301 USA (818) 880-3500 WWW. ALCATEL-LUCENT. COM Alcatel-Lucent Proprietary Copyright © 2007 Alcatel-Lucent. This document may not be reproduced in whole or in part without the expressed written permission Alcatel-Lucent. Alcatel-Lucent ® and the AlcatelLucent logo are registered trademarks of Alcatel-Lucent. All other trademarks are the property of their respective owners. 2 ICS Dissolvable Agent for SafeGuard Administration Guide Contents Preface About this Guide . [. . . ] There are the following types of enforcement rules: ICS Dissolvable Agent for SafeGuard Administration Guide 25 Chapter 4: Administering Security Scanner Policies Firewall Application -- Use firewall application rules to require a certain firewall application. See Firewall Application Rules on page 26. Anti-Virus Application -- Use anti-virus application rules to require a supported anti-virus application. If you want to require an anti-virus application that is not supported, use the custom application rule. See Anti-virus Application Rules on page 27. Anti-Spyware Scan -- Use anti-spyware scan rules to prohibit certain spyware types. Custom Application -- Use custom application rules to prohibit or require any application. See Custom Application Rules on page 30. Custom Group -- Use Custom Group rules to bundle custom application enforcement rules into one rule. When you put enforcement rules in a group, the end point computer must meet at least one of the conditions in order to be in compliance. See Custom Group Rules on page 31. Firewall Application Rules Firewall application rules determine which firewall applications end point computers must have when they are logged onto your network. You can use this feature to require that end point users obtain the latest version of an Integrity client when they connect to your gateway. Creating a Firewall Application Rule The steps below give an overview of creating a firewall application rule. For detailed information about individual user interface elements, and how to complete the page, see the online help. To Create a Firewall Application Rule: 1 2 3 Log into the ICS Administrator Console and click Enforcement Rules. On the Enforcement Rules page click New Rule and choose Firewall Application. Select the firewalls you want to require. If end point computers violate these conditions they are considered to be out of compliance. 4 5 Select the action you want ICS to take if the end point user is not in compliance with this rule. Use the remediation area to specify any information or resources you want to provide to end point users to help them to become compliant with this rule. 26 ICS Dissolvable Agent for SafeGuard Administration Guide Chapter 4: Administering Security Scanner Policies 6 Click Save Rule. Anti-virus Application Rules It is important to protect your network from viruses. Every time an end point user logs in, your network is exposed to any viruses that the end point computer is infected with. Users who access your network through a gateway are particularly likely to be infected, since they are more likely to use their computers for personal uses, which put them at risk for viruses. In order to protect your organization from viruses, you should require your users to have anti-virus protection. Effective anti-virus protection requires not only having the correct anti-virus software on your end point computers, but also having a recent version of that software and up-to-date software definitions. [. . . ] Use the ICSinfo utility to scan a reference computer to obtain the information for all the installed anti-virus programs in the correct format. To Obtain Anti-virus Application Information: 1 Set up a reference computer with your anti-virus applications installed. Be sure to obtain the updates for your anti-virus providers. 2 Obtain the ICSinfo. exe file and copy it to your reference computer. The ICSInfo utility is available at: http://myIP:31862/ics/components/icsinfo. exe 3 Run the ICSInfo. exe file Using a command prompt run ICSInfo. exe -avinfo. [. . . ]