Mcafee Web Protection Service - McAfee SG310 Administration Manual

Firewall menu options
Access control
In the Test target host field, enter the host you intend to test the selected NASL script against. Specify
2
the host as either a hostname or an IP address.
In the Execution Timeout (seconds) field, enter how long before ending the test if a concrete result
3
is not returned in that time frame. Typically, the default setting of 300 seconds does not require
adjustment.
Select the appropriate Test button: Test vs vulnerable host or Test vs Invulnerable host. A message
4
indicates testing of the script is underway. Results of the test are recorded in the Syslog. Be sure to run
the test against both vulnerable and invulnerable hosts. Once you successfully test against vulnerable and
invulnerable hosts, the script is deemed safe to use. In the vs. columns, crossmarks indicate an
unsuccessful test; checkmarks indicate a successful test.
Disabling a policy enforcement script
From the Firewall menu, click Access Control > Script Management tab. The Manage Scripts page
1
appears.
Click the enabled checkbox to disable the script. The check mark no longer displays, indicating the script
2
is now disabled.
Deleting a policy enforcement script
From the Firewall menu, click Access Control > Script Management tab. The Manage Scripts page
1
appears.
Click the delete icon for the script you want to delete. An action successful message is displayed.
2
Uploading a NASL script
Use this procedure to upload NASL scripts to the appliance. NASL is the part of the Nessus vulnerability
scanner that performs the majority of the vulnerability checks.
From the Firewall menu, click Access Control > Script Upload tab. The Upload Scripts page appears
1
(Figure 218).
Figure 218 Script Upload Policy tab
.
In the Upload NASL script field, either enter the file name or click Browse to locate the script file you
2
want to upload.
Click Add. This file is uploaded to the UTM Firewall appliance and made available in the
3
enforcement

McAfee Web Protection Service

McAfee ® Web Protection Service is a security-as-a-service deployment option that provides Web filtering,
reputation-based filtering, protection against malware and spyware, and informative reports and
dashboards. Web Protection Service is a security-as-a-service deployment option. To subscribe to the
McAfee Web Protection Service, contact your McAfee channel partner.
216 McAfee UTM Firewall 4.0.4 Administration Guide
scripts, where you must enable and validate the script.
Managing policy