Table of Contents
Advertisement
Quick Links
Advertisement
Table of Contents
Related Manuals for McAfee MSA09EMB1RAA - Site Advisor Plus 2009
Summary of Contents for McAfee MSA09EMB1RAA - Site Advisor Plus 2009
- Page 1 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 2 EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.
-
Page 3: Table Of Contents
Customize messages for users ............. . 35 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 4 Working with the Web Reporter............. . 54 McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
-
Page 5: Benefits Of Using Siteadvisor Enterprise Plus
Internet Explorer or Firefox or downloading files with Internet Explorer. SiteAdvisor Enterprise Plus is integrated with McAfee advanced protection solutions. This guide provides information that you need to create a browsing security strategy for your business and configure SiteAdvisor Enterprise Plus policy options. -
Page 6: How Safety Ratings Are Compiled
SiteAdvisor button with the View | Toolbars command or check file downloads. How safety ratings are compiled A McAfee team derives safety ratings by testing a variety of criteria for each site and evaluating the results to detect common threats. Automated tests compile safety ratings for a website by: •... -
Page 7: Using Site Safety Balloons
• In Internet Explorer, users can display or hide the menu button by using the View | Toolbars | McAfee SiteAdvisor menu option. This does not affect the functional status (enabled or disabled) of the SiteAdvisor Enterprise Plus client software. -
Page 8: Using The Siteadvisor Menu
If the communication error button appears, show the balloon for the site, and click Troubleshoot. The connection status page that appears indicates the possible cause of the communication error. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 9: Safety Reports Provide Details
Users can supplement the color-coded safety information for a site by viewing its detailed safety report. These reports describe specific threats discovered by testing and include feedback submitted by site owners and users. Safety reports for sites are delivered from the McAfee SiteAdvisor and provide the following information: Item... -
Page 10: Viewing Safety Reports
Viewing safety reports Use this task to view safety reports to obtain more information about a site’s safety rating. Task • Do any of the following to view a safety report for a site: McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 11: Administrators Customize Policy Settings
• Blocked sites • Warned sites • Authorized sites • Prohibited sites • Phishing pages • File downloads Event Tracking • Report on domain site visits. • Report on internal domain site visits. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 12 • Apply threat factors to fine-tune rating actions. Content Actions Allow, warn, or block sites based on content categories. (Available with the Web Filtering for Endpoint extension) See Configuring Policies for more information. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
-
Page 13: Guidelines For Creating A Strategy
Setting up a Browsing Security Strategy SiteAdvisor Enterprise Plus includes a default policy with settings recommended by McAfee to protect managed systems from most web-based threats. This section provides an overview of features that assist you in customizing policy settings that are specific to your business needs. -
Page 14: Select The Right Policy Options And Features
Obtain information for and track activity on private domain Event Tracking policy servers. Obtain information for and track visits to non-private Event Tracking policy domain servers. Obtain information for and track each page accessed from Event Tracking policy domain servers. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 15: Information That Siteadvisor Enterprise Plus Sends
SiteAdvisor Enterprise Plus does not send information on your company’s intranet sites to the SiteAdvisor website’s servers, unless specifically requested. See Tracking visits to domains and downloads under Configuring Policies for more information. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 16: How Policies Work
If, however, you are working in an ePO 4.5 environment, where the ePO server is version 4.5 and the McAfee Agent on the client system is version 4.5, you can create user-specific instead of system-specific policy assignments with policy assignment rules. These assignment rules are enforced on the client system for a particular user when that user logs on, regardless McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 17: Types Of Policy Categories
During installation, a default SiteAdvisor Enterprise Plus policy is added to the ePO master repository and listed in the Policy Catalog. The default policy settings are: Policy Default policy settings Authorize List No Authorize list is set up. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 18 Endpoint extension is installed. Rating Actions • Site navigation rating actions: • Yellow: Warn • Red: Block • Unrated: Allow • Page-level rating actions: Block phishing pages selected. Phishing pages detected on allowed sites are blocked. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
-
Page 19: Creating And Editing Policies
SiteAdvisor Enterprise Plus to access the Internet through the proxy servers. The Proxy Server tab on the General policy page includes settings to: • Use no proxy server (default). • Use Internet Explorer proxy server settings. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 20: Configuring Proxy Settings
Programs control panel on a client system. If it appears, users can remove SiteAdvisor Enterprise Plus. You might find this option useful in troubleshooting, but McAfee does not recommend its application. By default, this option is set to prohibit the appearance of the application in the control panel. -
Page 21: Enabling Observe Mode
Use this task to allow SiteAdvisor Enterprise Plus to appear in the Add or Remove Programs control panel on client systems. If you allow it to appear, users can remove SiteAdvisor Enterprise Plus. You might find this option useful in troubleshooting, but McAfee does not recommend its application. -
Page 22: Block And Warn Sites By Ratings And Threat Factors
To control access to site resources on authorized sites, see Working with Authorize lists . Tasks Blocking or warning site access based on ratings Blocking or warning site access based on threat factors Blocking or warning file downloads based on ratings Blocking phishing pages McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 23 A site with an overall rating of green can contain individual download files rated yellow or red. To protect users, specify an action that is specific to the rating for an individual file. Use this McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
-
Page 24: Use Authorize And Prohibit Lists For Sites
A Prohibit list contains a list of URLs or site patterns that are blocked on all computers using the policy. See How site patterns work for more information. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 25: How Site Patterns Work
• /download/news • http:// www.myacme.com • /user/downloads/applications/setup.exe • http://www.info.acme.net • http://acme.com.tk NOTE: Use the "." character at the beginning of any site pattern to match a specific domain. This character McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 26: How Multiple-Instance Policies Work
Group A and Group B, plus additional sites specific to Group C. By using an effective policy, there is no need to re-enter all the sites from Group A and Group B into the Authorize list for Group C. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 27: Working With Authorize Lists
For option definitions, click ? in the interface. Do one of the following: • ePolicy Orchestrator 4.0 — Go to Systems | Policy Catalog. • ePolicy Orchestrator 4.5 — Click Menu | Policy | Policy Catalog. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 28 For the policy you want to edit, click Edit. On the Manage Authorized Sites tab, select the checkbox next to each site you want to edit, then click Edit. Modify the site patterns or comments as needed. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 29 Go. SiteAdvisor Enterprise Plus displays any site patterns that match your entry. If no site patterns are displayed, the Authorize list does ensure access to the URL you entered. To clear the test criteria and results, click Clear. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 30 For the policy you want to edit, click Edit. On the Advanced Options tab, select Track events and request information from the SiteAdvisor server. For File downloads, select an action for yellow, red, and unrated files. Click Save. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 31 SiteAdvisor server is not requested. Phishing page blocking and download rating actions are also disabled only when this option is disabled. McAfee recommends using this procedure to prevent private information about intranet sites from being sent to the SiteAdvisor website’s servers. It also reduces the amount of data returned by certain reports because visits to authorized sites are not reported.
-
Page 32: Working With Prohibit Lists
Use this task to add one site at a time to a Prohibit list. Task For option definitions, click ? in the interface. Do one of the following: • ePolicy Orchestrator 4.0 — Go to Systems | Policy Catalog. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 33 Prohibit List. For the policy you want to edit, click Edit. On the Manage Prohibited Sites tab, select the checkbox next to each site you want to delete from the list. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 34 Use this task to test whether specific sites or site patterns are included in a Prohibit list. When Prohibit List is implemented as a multiple-instance policy, this is useful for testing the resulting effective policy (see How multiple-instance policies work ). McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
-
Page 35: Customize Messages For Users
Creating a message for rated sites Use this task to customize the message that is displayed when users attempt to access a site where you have associated an action with the site’s rating. This message appears on: McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 36 For the policy you want to edit, click Edit. Click the Site Resources tab. Select a language. Under Block message (for phishing page), type a message of up to 50 characters. Click Save. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 37 From the Product list, select SiteAdvisor Enterprise Plus 3.0.0; from the Category list, select Enforcement Messaging. For the policy you want to edit, click Edit. Click the Authorize and Prohibit Lists tab. Select a language. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
-
Page 38: Disable And Reenable The Software
CAUTION: In general, McAfee does not recommend disabling the client software. However, it might be useful when performing tests or troubleshooting network connection problems. Be sure to re-enable the software as soon as it is practical to do so. -
Page 39: Disabling And Reenabling From The Browser
The domain is the recognizable name of the Internet or local intranet network resource that a server at a particular IP address serves up. A server or single IP address can have several domains; for example, • example.com McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 40: Tracking Visits To Domains And Downloads
• ePolicy Orchestrator 4.5 — Click Menu | Policy | Policy Catalog. From the Product list, select SiteAdvisor Enterprise Plus 3.0.0; from the Category list, select Event Tracking. For the policy you want to edit, click Edit. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 41: Tracking Domain Page Views And Downloads
To track content categories of all green sites, use this option. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 42 From the Product list, select SiteAdvisor Enterprise Plus 3.0.0; from the Category list, select Event Tracking. For the policy you want to edit, click Edit. For Domains and downloads, select Track content categories for all green sites. Click Save. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
-
Page 43: Use Queries To Create Reports
Use SiteAdvisor Enterprise Plus queries to obtain reports about browsing activity on managed systems. Choose from a variety of predefined McAfee queries, or create your own by using the ePO Query Builder. You can use a predefined query as the basis for a customized query or create a brand new query. -
Page 44: Creating Reports
• ePolicy Orchestrator 4.5 — Click Menu | Reporting | Queries. From the Queries column, select the query to run. All SiteAdvisor Enterprise Plus queries begin with SAE+: followed by the query name. Click Run. The query results page shows you the details. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 45: Running A Purge Task
• Top 100 Red Sites on Prohibit List Summary • Top 100 Visits by Rating • Top 100 Visits by Action • Top 100 Downloads by Rating • Top 100 Downloads by Action McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 46: Creating Monitors
Repeat steps 5-8 to add monitors, then click Save. 10 In the Make Active dialog box, click Yes. You can add only active dashboards to the Dashboard page. 11 In the Manage Dashboards page, click Close. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 47: Frequently Asked Questions
By setting up monitors that use the applicable queries, or frequently checking reports generated by these queries, you know when users are circumventing policy settings and can take immediate steps to ensure compliance. See Using Dashboards, Monitors, and Reports for more information. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 48 SiteAdvisor Enterprise Plus to uniquely identify the site being rated for security. (For example, if a managed system visited 10 different pages on the www.mcafee.com website over the course of a single browser session, only a single visit to the .mcafee.com domain would be logged.) The ability to track domain pages viewed is provided, however, when the Web Filtering for Endpoint extension is installed.
- Page 49 10 different pages on the www.mcafee.com website over the course of a single browser session, only a single visit to the .mcafee.com domain would be logged. That is the information required to locate a SiteAdvisor rating. Note that a single browser session times out after 30 minutes and a new session is then tracked.)
-
Page 50: Where To Find More Information
• On the Home page or Analysis page, type a URL into the Look up site report box to view a site’s safety report. • Submit the URL for an unrated site you would like McAfee to test. • Submit the URL for your site if you disagree with its SiteAdvisor rating and would would like McAfee to retest it. -
Page 51: How Web Content Filtering Works
• Enter Web Reporter access information For details on applying the Content Actions policy, see Applying the Content Actions policy . For details on applying the Event Tracking options, see Track events for reports under Configuring Policies . McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 52: Report And Dashboard Additions With Web Content Filtering
• Log sources — These are devices on the network set up to generate or store log files. Log files contain web filtering data, including information such as user names, IP addresses, URLs, time stamps, and protocol types. Web Reporter collects and processes the log files McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 53: Sending Web Reporter Logs
Use this task to find and set the action for any site content category. You can sort by functional group, risk group, or action; or filter by a specific item. By default, all content categories are set to Allow. McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... -
Page 54: Working With The Web Reporter
• Connecting to the database • Defining directories • Configuring log sources • Customizing a log format • Setting up email delivery • Managing login accounts • Configuring options • Optimizing performance • Maintenance • Running reports McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide... - Page 55 SiteAdvisor Enterprise Plus and site access based on ratings supported browsers on SiteAdvisor Enterprise Plus site access based on threat factors multiple-instance policies track allowed green sites SiteAdvisor Enterprise Plus 11, track domain page views McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 56 Internet usage 15, proxy settings troubleshooting communication error supported servers, SiteAdvisor Enterprise Plus website configuring SiteAdvisor Enterprise Plus 20, SiteAdvisor menu purge task, SiteAdivsor Enterprise Plus description of running disabled displaying options McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 57 McAfee ServicePortal troubleshooting rated, customized messages for communication error search protection SiteAdvisor Enterprise Plus support SiteAdvisor support testing for safety vulnerabilities (See threats) viewing SiteAdvisor safety reports McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...
- Page 58 Index McAfee SiteAdvisor Enterprise Plus 3.0 Product Guide...