Frequently Asked Questions; Questions About Policies - McAfee TSA00M005PAA - Total Protection Service Product Manual

Using Firewall Protection

Frequently asked questions

6 Use "learn" mode to identify which Internet applications to allow. This ensures that no
applications required for your business are blocked before you have the opportunity to
authorize their use. Then change the protection mode to Protect.
7 If particular types of suspicious activity are occurring frequently or certain computers
appear vulnerable, update the policy to resolve these issues.
• Ensure that firewall protection is enabled.
• Carefully specify the environment where client computers are used. For users with
mobile computers, ensure that they know how to select the correct connection type
each time their environment changes and that their policy allows them to do so.
• Before installing firewall protection on a server, ensure that the server's system services
and Internet applications are configured correctly. If there is a possibility that firewall
protection might be installed when no user is present to monitor the installation, disable
the policy setting for Automatically install the desktop firewall on all computers
using this policy.
• When running firewall protection on a server, ensure that system service ports
are configured correctly to prevent disruption of system services. Ensure that no
unnecessary ports are open.
• For maximum protection, set firewall protection to Protect mode to automatically block
suspicious activity.
8 If your account includes computers that are operated in multiple environments, such as in
the office and in unsecured public networks, update the policy appropriately.
• Configure policy options that allow users to select their connection type to match their
environment. Be sure they know when and how to select the appropriate connection type.
• If you configure custom connections that include IP addresses, specify ranges of IP
addresses appropriate for all their working environments.
Frequently asked questions
This section includes questions asked by administrators and client computer users that are
related to using these features of firewall protection.
• Policies
• General issues

Questions about policies

How can I prevent popup prompts from appearing when unrecognized programs
are detected?
Firewall protection prompts users for a response to an Internet application detection when set
to Prompt mode. To prevent popups, select Protect or Report mode. For highest protection,
select Protect to automatically delete unrecognized Internet applications.
Can I add allowed Internet applications to the McAfee Default policy?
No. However, you can create a new policy and add them. When you click Add Policy on the
Policies page of the SecurityCenter, the new policy is prepopulated with the McAfee Default
policy settings. Specify a name for the new policy, save it, and then add allowed Internet
applications as needed.
McAfee Total Protection Service Product Guide
99