Defining Computer Groups - Symantec 360R - Security Gateway SGS Administration Manual

Defining computer groups

Computer groups are logical groups of network entities used for outbound rules.
You must configure and bind all local hosts (nodes) to the computer group they
are in by using the Computers tab. See
on page 65.
You can configure the following properties for an computer group:
Antivirus policy enforcement.
■
See "How antivirus policy enforcement (AVpe) works"
Content filtering.
■
See "Advanced network traffic control"
Access control.
■
See "Defining inbound access"
To define computer group properties
See "Computer Groups tab field descriptions"
1 In the left pane, click Firewall.
2 In the right pane, on the Computer Groups tab, under Security Policy, on the
Computer Group drop-down list, select the computer group you want to
configure.
3 To enable AVpe, Under Antivirus Policy Enforcement, check Enable
AntiVirus Policy Enforcement.
4 If you enabled AVpe, click one of the following:
Warn Only
■
Block Connections
■
5 Under Content Filtering, if you check Enable Content Filtering, you also
need to select one of the following:
Use Allow List
■
Use Deny List
■
6 Under Access Control (Outbound Rules) select one of the following:
No restrictions
■
Block ALL outbound access
■
Use rules defined in Outbound Rules Screen.
■
See "Defining outbound access"
7 Click Save.
Understanding computers and computer groups
"Defining computer group membership"
on page 103.
on page 68.
on page 179.
on page 69.
Network traffic control
on page 104.
67