Filtering Network Traffic - Symantec ALTIRIS REAL-TIME SYSTEM MANAGER 7.0 SP2 - V1.0 Manual

Filtering network traffic

To view details of active IDE-R session
1 On the Manage Power State and Redirection page, click Details to open the
Redirection Details dialog box.
2 (Optional) To disconnect a boot device, click Stop redirection.
3
Click Close.
(Intel AMT only)
The network filtering (Circuit Breaker) functionality on Intel AMT lets you block
network traffic from and to the target computer's operating system. For example,
you can use this feature to isolate an infected computer from the network.
Note: Network filtering works only if both client operating system and Intel AMT
network settings are configured to use Dynamic Host Configuration Protocol
(DHCP).
Some ports stay open when network filtering is active.
See "About network filtering ports and settings"
You can also run this task on multiple computers, immediately or on a schedule.
See "Filtering network traffic on multiple computers "
To block all incoming and all outgoing traffic from the target computer's operating
system
1 Open the Real-Time view for the computer you want to manage.
See "Accessing the Real-Time view"
2 Click Real-Time System Manager > Networking > Intel AMT Network
Filtering.
3 Click Filter network traffic other than to and from the Notification Server.
4
If you want to prevent the target computer from sending malicious packets,
check Enable anti-spoofing filter.
This feature forces the identity verification of outgoing network traffic and
drops packets if the computer is suspected of originating malicious attacks
that are known as IP spoofing.
5 Click Save changes.
Using Real-Time System Manager
Running real-time one-to-one tasks
on page 72.
on page 42.
on page 32.
37