Managing Firewall Security Levels - McAfee VIRUSSCAN PLUS 2008 User Manual

72 McAfee VirusScan Plus

Managing Firewall security levels

Firewall's security levels control the degree to which you want to
manage and respond to alerts. These alerts appear when it
detects unwanted network traffic and inbound and outbound
Internet connections. By default, Firewall's security level is set to
Trusting, with outbound-only access.
When Trusting security level is set and Smart Recommendations
is enabled, yellow alerts provide the option to either allow or
block access for unknown programs that require inbound access.
When known programs are detected, green informational alerts
appear, and access is automatically allowed. Allowing access lets
a program create outbound connections and listen for
unsolicited incoming connections.
Generally, the more restrictive a security level (Stealth and Tight),
the greater the number of options and alerts that are displayed
and which, in turn, must be handled by you.
The following table describes Firewall's six security levels,
starting from the most restrictive to the least:
Level Description
Lockdown Blocks all inbound and outbound network connections,
including access to Web sites, e-mail, and security updates.
This security level has the same result as removing your
connection to the Internet. You can use this setting to
block ports you set to open on the System Services pane.
Stealth Blocks all inbound Internet connections, except open
ports, hiding your computer's presence on the Internet.
The firewall alerts you when new programs attempt
outbound Internet connections or receive inbound
connection requests. Blocked and added programs appear
on the Program Permissions pane.
Tight Alerts you when new programs attempt outbound Internet
connections or receive inbound connection requests.
Blocked and added programs appear on the Program
Permissions pane. When the security level is set to Tight, a
program only requests the type of access it requires at that
time, for example outbound-only access, which you can
either allow or block. Later, if the program requires both an
inbound and an outbound connection, you can allow full
access for the program from the Program Permissions
pane.
Standard Monitors inbound and outbound connections and alerts
you when new programs attempt Internet access. Blocked
and added programs appear on the Program Permissions
pane.