Configuring Network Quarantine; Network Quarantine Settings; Turning Network Quarantine On In The Whole Domain; Fine-Tuning Network Quarantine - F-SECURE CLIENT SECURITY 9.00 Administrator's Manual

Configuring network quarantine

Network quarantine is an Internet Shield feature that makes it possible to restrict the network access of hosts
that have very old virus definitions and/or that have real-time scanning turned off.
The normal access rights of such hosts are automatically restored once the virus definitions are updated
and/or real-time scanning is turned on again.
This section describes the network quarantine settings and contains an example of how to enable the network
quarantine feature in the managed domain. There is also a short description of how to configure the network
quarantine security level by adding new firewall rules.

Network quarantine settings

The network quarantine settings are located on the
In the Network quarantine
• Turn network quarantine on or off.
• Specify the virus definitions age that activates network quarantine.
• Specify whether turning off real-time scanning on a host activates network quarantine.

Turning network quarantine on in the whole domain

You can enable network quarantine for the whole domain by following the steps given here.
1. Select Root on the
2. Go to the Settings
3. Select Enable network
4. Specify the Virus definitions age to activate network
5. If you want to restrict the host from accessing the network when real-time scanning is turned off, select
Activate network quarantine on host if real-time scanning is
6. Click
to save and distribute the policy.

Fine-tuning network quarantine

Network quarantine is implemented by forcing hosts to the
restricted set of firewall rules.
You can add new Allow
network access to hosts in network quarantine. You should not restrict access further as this may cause hosts
to lose network connectivity.
section you can:
Policy domains tab.
tab and select the Firewall security levels
quarantine.
rules to the firewall rules in the
F-Secure Client Security | Configuring Internet Shield | 93
Firewall security levels
page.
quarantine.
disabled.
Network quarantine
Network quarantine security level to allow additional
page.
security level, which has a