Symantec 20032623 - Endpoint Protection Small Business Edition Implementation Manual page 197

TruScan proactive threat scan settings for legacy clients. Many of the settings
can be locked so that users on client computers cannot change the settings.
Managing SONAR
Table 13-1
Task
Learn how SONAR works
Check that SONAR is enabled
Check the default settings for SONAR
Make sure that Insight lookups are
enabled
Description
Learn how SONAR detects unknown threats.
Information about how SONAR works can help
you make decisions about using SONAR in your
security network.
See About SONAR" on page 195.
See About the files and applications that SONAR
detects" on page 196.
To provide the most complete protection for your
client computers you should enable SONAR.
SONAR interoperates with some other Symantec
Endpoint Protection Small Business Edition
features. SONAR requires Auto-Protect.
You can use the Computers tab to check whether
Proactive Threat Protection is enabled on your
client computers.
Note:
Legacy clients do not report Proactive
Threat Protection status to Symantec Endpoint
Protection Manager.
See Enabling or disabling SONAR"
SONAR settings are part of a Virus and Spyware
Protection policy.
See About the default Virus and Spyware
Protection policy scan settings"
SONAR uses reputation data in addition to
heuristics to make detections. If you disable
Insight lookups, SONAR makes detections by
using heuristics only. The rate of false positives
might increase, and the protection that SONAR
provides is limited.
You enable or disable Insight Lookups in the
Submissions dialog.
See Enabling or disabling client submissions to
Symantec Security Response"
Managing SONAR 197
Managing SONAR
on page 200.
on page 153.
on page 172.