Customizing Download Insight Settings - Symantec 20032623 - Endpoint Protection Small Business Edition Implementation Manual

Customizing Download Insight settings

3 Configure any of the following options:
Insight
Bloodhound
4 Click OK.
You might want to customize Download Insight settings to decrease false positive
detections on client computers. You can change how sensitive Download Insight
is to the file reputation data that it uses to characterize malicious files. You can
also change the notifications that Download Insight displays on client computers
when it makes a detection.
See Customizing the virus and spyware scans that run on Windows computers"
on page 180.
See Managing Download Insight detections"
To customize Download Insight settings
1 In the console, open a Virus and Spyware Protection policy and select
Download Protection.
2
On the Download Insight tab, make sure that Enable Download Insight to
detect potential risks in downloaded files based on file reputation is checked.
If Auto-Protect is disabled, Download Insight cannot function even if it is
enabled.
3
Move the slider for malicious file sensitivity to the appropriate level.
If you set the level higher, Download Insight detects more files as malicious
and fewer files as unproven. Higher settings, however, return more false
positives.
4 Check or uncheck the following options to use as additional criteria for
examining unproven files:
Files with fewer than x users
Customizing Download Insight settings
Insight allows scans to skip trusted good files.
The scan can skip the files that Symantec trusts
as good (more secure) or that the community
trusts as good (less secure).
Bloodhound isolates and locates the logical
regions of a file to detect a high percentage of
unknown viruses. Bloodhound then analyzes the
program logic for virus-like behavior. You can
specify how the sensitivity for detection.
on page 165.
Customizing scans 189