Symantec 20032623 - Endpoint Protection Small Business Edition Implementation Manual page 166

166 Managing Virus and Spyware Protection
Managing Download Insight detections
Task
Learn how Download Insight uses
reputation data to make decisions about
files
View the Download Risk Distribution
report to view Download Insight
detections
Note: If you install Auto-Protect for email on your client computers, Auto-Protect
also scans the files that users receive as email attachments.
See Managing scans on client computers"
Managing Download Insight detections
Table 11-15
Description
Download Insight uses reputation information exclusively when it makes
decisions about downloaded files. It does not use signatures or heuristics
to make decisions. If Download Insight allows a file, Auto-Protect or SONAR
scans the file when the user opens or runs the file.
See How Symantec Endpoint Protection Small Business Edition uses
reputation data to make decisions about files"
You can use the Download Risk Distribution report to view the files that
Download Insight detected on your client computers. You can sort the
report by URL, Web domain, or application. You can also see whether a
user chose to allow a detected file.
Note:
Risk details for a Download Insight detection show only the first
portal application that attempted the download. For example, a user might
use Internet Explorer to try to download a file that Download Insight
detects. If the user then uses Firefox to try to download the file, the risk
details show Internet Explorer as the portal.
The "user-allowed" files that appear in the report might indicate false
positive detections.
Users can allow files by responding to notifications that appear for
detections.
Administrators receive the report as part of a weekly report that Symantec
Endpoint Protection Manager generates and emails. You must have specified
an email address for the administrator during installation or configured
as part of the administrator properties. You can also generate the report
from the Reports tab in the console.
See Running and customizing quick reports"
on page 136.
on page 169.
on page 270.