5.2. MATERIALES DE REFERENCIA
5.2.1. CRONOGRAMA DE ACTIVIDADES ¡Error! Marcador no definido.
[Fig. 49] VMS Console Setting Menu Screen
① VMS Policy Information
• It shows a list of policies for agent, Windows, distribution, ViRobot, and subserver. ② Policy Settings
• By selecting New Policy, user can add policies.
• If policy is added and saved by inputting items in Add Policy window below, policy list is updated in VMS policy information window.
[Fig. 50] Policy Addition Settings
[Fig. 6] Policy Information
IV. Policy Name
¾ It shows created policies. V. Policy Name
¾ It shows a selected policy as parent policy. VI. Administrator ID
¾ It shows account name that creates policy. VII. Policy Version
¾ It shows version information for created policies. ③ Distribution Status
• It shows distribution status for VMS agent by policies.
• It displays distribution status for each policy with graphs, and shows distribution results by policies.
2.2.4.1 Agent Policy Settings Interface
[Fig. 52] VMS Agent Policy
General
[Fig. 53] VMS Agent Policy General Menu
I. Connection interval
¾ Set the interval to connect from agent to server.
¾ Unit is second. If connection interval is short, access to sever is increased, thus it may overload server equipments. It is recommended to use default value assigned when installed. (14,400 seconds = 4 hours)
II. Server Settings
¾ Add/Delete server address that agent connects. (Default: Disable)
¾ By setting ‘Delete the server address in agent’ option, existing server address can be deleted. Server address is input value basically when installed, and user can’t change. If user doesn’t know server address, please contact administrator.
[Fig. 54] VMS Agent Policy General Server Addition
III. Agent Settings
¾ Set socket communication time value between VMS server and agent by seconds. (Default: 3 seconds)
¾ Send the critical file to the server: Set option to send critical file to VMS server when it is found in agent installed system.
[Fig. 55] VMS Agent Restriction Policy Menu
I. Ability to change of settings for VMS agent
¾ Ability to change: Following options can be selected.
- Enable to change all (Default)
- Unable to change all
- Unable to change user settings tab
- Unable to change name/division
- Unable to change general tab II. Password settings to uninstall agent
¾ If user removes agents from system without discretion, the system can’t be protected from virus infection. Therefore password is assigned for agent removal. (Default: Disable)
III. Password settings to stop agent service
¾ Set password to prevent user from stopping agent service manually. Password function for agent service suspension supports Windows XP, NT, 2000, and 2003. (Default: Disable)
IV. Alert settings
¾ Set user notification. A. Display update window
¾ If VMS agent downloads engine and signature files, or if policy is automatically updated from VMS server, user sets ‘Show update window’ option. (Default: Disable)
B. Display notice message
¾ Set not to appear agent message window to user. (Default: Enable) Error check
[Fig. 56] VMS Agent error check menu
I. VRDT (Interlocking product) agent error report
¾ Report update errors by setting specified period of time. (Default: 14 days) II. Agent’s HDD size
¾ If the size is below the relevant setting value on the basis of HDD availability in agent system, it reports as fault. (Default: 60 MB)
Worm Vulnerability Collection.
[Fig. 587] VMS Agent Policy - Vulnerable Password Information Additional Settings
II. Operating option on detecting of vulnerable account: When detecting vulnerable account during collection of worm vulnerability data, it performs actions as below.
¾ Do nothing: When detecting vulnerable account, it maintains existing settings.
¾ With notification to user: If detecting vulnerable account, it sends message and guides to change the password for the account. (Default: Enable)
¾ Option for shared folder’s privilege change: If password for vulnerable account is not changed, it cancels the permissions for all shared folders. (Default: No change)
¾ Without notification to user: If detecting vulnerable account, it does not send message to user cancels the permissions for all shared folders.
Schedule
[Fig. 59] VMS Agent - Schedule Menu
I. Task Type: Agent updates and worm vulnerability check can be selected. II. Operation cycle: Select the cycle to act as below according to task types.
¾ Perform on agent starting
¾ Perform once on connecting cycle (Do not perform on next cycle)
¾ Do nothing
III. Operation limit time settings: Set the time for running tasks by specifying restriction time.
¾ Do not change the existing setting: Apply existing time-out setting.
¾ Release limit: Cancel existing time-out setting.
2.2.4.2 Windows Policy Settings Interface
[Fig. 60] VMS Windows Policy
① General
¾ Control screen saver settings in agent OS. I. Control administrator
¾ Screen saver settings: Set screen saver at the time agent OS is not being used.
¾ Password settings: Set password on resume from screen saver. II. Maintain user settings: Maintain the value set by user. (Default setting) Control Autorun.inf
¾ Control Autorun.inf that runs when inserting removable devices. Reboot is needed after applying policy.
I. Do not change existing settings: Leave existing auto-run settings. (Default setting) II. Activate all drives auto-execution: Enable auto-run setting for all drives for user
convenience such as program installation or device execution.
III. Deactivate all drives auto-execution(Recommended): Disable auto-run setting for all drives to prevent the drives from virus spreading by removable device.
Activate system recovery
¾ It controls ‘System Restore’ that restores system to previous backup point. I. Do not change: Leave currently set system restore function. (Default setting) II. Activate system recovery: Set the system to restorable status.
III. Deactivate system recovery: Set the system to do not recovery. ② Windows Updates
[Fig. 62] VMS Windows Policy Update Menu
Windows Update
¾ If Agent OS is Windows XP or higher, user enable or disable automatic updates function from Windows-Control Panel-Automatic Updates.
I. Do not change
II. Automatic: User can choose day and time for update. III. Download updates, but install on user defined time.
IV. Select to be notified new updates, but do not download or install them. V. Do not use automatic update.
2.2.4.3 Distribution Policy
• User can distribute files by grouping through distribution policy.
• When clicking ‘Add’, distribution package setting starts.
[Fig. 63] VMS Distribution Policy
General
[Fig. 64] VMS Distribution Policy General Menu
I. Package Information: User can include existing distribution package or create new package.
¾ Package name: Input package name to create.
¾ Package details: Input additional description for distribution package.
II. Distribution Type: User can set distribution type by selecting general files or installation software.
¾ Normal file: Specify distribution paths transmitted on distribution of file package.
¾ Installed software: Select the name displayed from program add/remove when distributing installation software.
[Fig. 65] VMS Distribution Policy Installation Software Name Selection
III. Distributing File List: By selecting file or installation software, register it in distributing file list or remove it
¾ Add: Files are added through ‘Import file’ window. File addition is restricted to maximum 30 MB.
¾ Delete: Files registered in distribution file list are removed.
IV. Execution option after Distribution: Set this option for running distributed files.
¾ Executable files: Specify executable files for running distribution files.
¾ Executing options: Specify executable file options and execute the files.
¾ Hide window on executing: Hide action set in execution options. Distributing Time
[Fig. 66] VMS Distribution Policy Distribution Time Menu
I. Distributing period settings
¾ No limits: Distribute regardless of period. (Default setting)
¾ Distribute only when the assigned period: Specify start date and end date. II. Distributing time settings
¾ No limit: Distribute regardless of time. (Default setting)
¾ Distribute only in the assigned time: Specify start time and end time. III. Distribution cycle settings
¾ Every day: Distribute every day. (Default setting)
¾ Once: Distribute only once regardless of period, time, and frequency.
¾ Once per a week: Distribute once per a week on the basis of specified day. Distributing target’s limits
[Fig. 67] VMS Distribution Policy Distribution Restriction Menu
I. Distributing target OS: User can limit target OS for distribution by specifying the targets.
¾ Windows 2000 Professional (Default setting)
¾ Windows Server 2000
¾ Windows XP (Default setting)
¾ Windows Server 2003
¾ Windows Vista (Default setting)
¾ Windows Server 2008
¾ Windows 7 (Default setting)
II. Target IP range for distribution: Limit distribution targets by specifying IP address.
¾ No limit: Apply distribution policy to all systems set in target OS for distribution. (Default setting)
¾ IP range’s limits: Distribute only if IP address is in the range of start IP address and end IP address.
[Fig. 68] VMS Distribution Policy - Add IP Range for Distribution Restriction
Result of Package Saving
¾ It shows result for created package. When clicking ‘OK’ for package saved results, package creation is processed and message for package saved results is displayed. Execution program type of package files is converted to Hauri’s unique compressed file type, and the files are safely saved in C:\Documents and Settings\All Users\Application Data\Hauri\VMS\Server\Pcy\FilePackage folder, then they are distributed.
[Fig. 70] VMS Distribution Policy Package Saved Results
2.2.4.4 ViRobot Policy – Scan Settings – General Setting Interface
• User can set scan setting, disinfection setting, advanced setting, and scan startup setting for malware detection by custom scan and scan with right mouse button in ViRobot Internet Security.
[Fig.71] ViRobot Policy Scan Settings - General Menu
Scan
I. All files: Scan all files on general scan. (Default setting for scan on creation of new policy)
II. Major files scanned by extension: Scan user-defined extensions defined in detailed settings on custom scan.
A. Detailed Settings
¾ User can set extensions for scanning major files by dividing to executable file extension, document file extension, and user-defined extension. If choosing default setting, executable file and document file are added and user-defined extension can be added by typing extensions in extension input field. The extension items for this setting are as below.
→ Executable files: EXE, BAT, COM
→ Document files: DOC, PDF, TXT, HTM, HWP, HTML, BAK, MBD, PPT, XLK, PPTM, XLS, XLSX
[Fig. 72] ViRobot Policy - Set main infection file details
III. Use scan size limit: File size for scan can be limited by setting. The size can be set within 1GB or 100MB. If size limit is not needed, cancel the option. (Default: 1GB). IV. Scan speed setting: Scan speed on general scan can be controlled. Speed control
levels are divided to maximum, medium (recommended), and minimum. Set appropriate scan speed according to system performance.
Add settings
I. Use compressed file scan: Files inside compressed file can be scanned. (Default setting)
A. Detailed settings: Compression level, size limit for scanning compressed files, and scan type for compressed files can be specified in advanced settings
[Fig. 73] ViRobot Policy - Set Scan Skip List
[Fig. 74] ViRobot Policy - Add Scan Skip List
[Fig. 76] ViRobot Policy - Added Scan Skip File
[Fig. 77] ViRobot Policy - Added Scan Skip Extension
III. Start scan setting (Default: check all)
A. Running memory scan: Run scan for currently loaded memory on general scan. Memory scan is processed first on general scan.
interaction. Automatically disinfected files are saved in backup storage. (Default setting on creation of new policy)
¾ Auto-delete: If detecting malware, it automatically deletes the malware without user interaction. Automatically deleted files are moved to backup storage.
II. Repair failed/Irreparable
¾ Keep intact: It shows only scan information for infected files with malware.
¾ Auto-delete: If detecting malware, it automatically delete the malware without user interaction. Automatically deleted files are moved to quarantine storage. (Default setting on creation of new policy)
2.2.4.5 ViRobot Policy – Scan Settings – Quick Scan Interface
• Applicable policy for quick scan in ViRobot Internet Security is set.
[Fig. 78] ViRobot Policy Scan Settings - Quick Scan Menu
Scan Settings
I. Malicious program scan: It performs scan for potentially unwanted programs first. (Default setting)
II. Virus scan for my document folder: If relevant box is checked, ‘My Documents’ folder path is automatically input in the field of target folders for quick scan below. (Default setting)
III. Virus scan for Windows folder: If relevant box is checked, ‘Windows’ folder path is automatically input in the field of target folders for quick scan below. (Default setting) IV. Quick scan target folder: It performs scan by adding user-defined paths on quick scan.
In additional settings window, Windows folder, System folder, My Documents folder, and C Drive folder have been defined and can be selected. User can input user- defined path manually
[Fig. 798] ViRobot Policy Scan Settings - Add Quick Scan Path
V. Delete: Select and remove existing folders for quick scan.
[Fig. 80] ViRobot Policy Scan Settings - Real-Time Monitoring Menu
Auto-run upon Windows start-up
¾ Real-time monitoring auto-run at Windows startup: It automatically runs real-time monitoring when Windows boots. (Default setting)
Use real-time monitoring
¾ It enables user to configure scan settings and disinfection settings at the time when scanning malware on real-time scan. (Default setting)
General Settings
I. All files: It monitors malware by monitoring I/O for all files in user PC. (Default) II. Main infected files (Based on extension): It monitors malware by monitoring I/O for
executable files in user PC. Detailed Settings
¾ User-defined extension: User can add or delete extensions of files for real-time monitoring.
※ Supported executable files for scan → Executable files: EXE, BAT, COM
→ Document files: DOC, PDF, TXT, HTM, HWP, HTML, BAK, MBD, PPT, XLK, PPTM, XLS, XLSX
[Fig. 81] ViRobot Policy - Main infected files
III. Run as hidden mode: According to disinfection setting for real-time monitoring, when detecting malware, it runs in background mode without security warning window or alarm to user. (Default)
Add Settings
I. Use scan skiip list: Apply scan exclusion items in real-time monitoring. (Default) A. Detailed setting: Scan exclusion items can be set according to detailed settings by
specifying folders, files, and extensions for exclusion. (No default setting)
[Fig. 84] ViRobot Policy - Added Real-Time Scan Skip Extension
I. Detect/scan USB drive: It blocks removable media such as USB interface from being used in system. (Default: Enable)
II. Use heuristic scan: Enable the heuristic engine to detect the various viruses. Repair Settings
I. Reparable
¾ Keep intact: It shows only scan information for infected files with malware.
¾ Auto-repair: If detecting malware, it automatically disinfects the malware without user interaction. Automatically disinfected files are saved in backup storage. (Default setting on creation of new policy)
¾ Auto-delete: If detecting malware, it automatically deletes the malware without user interaction. Automatically deleted files are moved to backup storage.
II. Repair failed/irreparable
¾ Keep intact: It shows only scan information for infected files with malware.
¾ Auto-delete: If detecting malware, it automatically delete the malware without user interaction. Automatically deleted files are moved to quarantine storage. (Default setting on creation of new policy)
[Fig. 85] ViRobot Policy - Malicious Process Menu
General Settings
I. Use Spyware/Adware Scan: Followings can be optionally selected. (Default setting)
¾ Spyware: It scans software that covertly gathers private information got on to user PC. (Default setting)
¾ Adware: It scans software that automatically displays advertisements after installing specific software or when running the software. (Default setting)
¾ Key logger: It scans software that tracks and logs the keys struck on a keyboard with malicious intention. (Default setting)
¾ Joke: It scans fake computer virus or program that arouses emotional anxiety and agitation without malicious intention. (Default setting)
¾ Remote control programs: It scans program that activates specific port or performs remote command by gaining permission of user system such as Trojans, IRQ, and Remote Control. (Default setting)
¾ Others (Malicious): It scans other predefined potentially unwanted programs. (Default setting)
II. Greyware: It scans greyware that is installed without user consent or knowledge. (Default setting)
[Fig. 86] ViRobot Policy - Add Customized Folder_1
[Fig. 879] ViRobot Policy - Add Customized Folder_2
¾ Delete: It deletes malicious program scan path that is registered in user-defined folder list.
Repair Settings
I. When malicious programs are found.
¾ Keep intact: It enables user to check detected program directly in the scan window.
¾ Auto-repair: If detecting unwanted program, it automatically disinfects the malware without user interaction. (Default setting)
¾ If internet start page change is required on repairing infection files: If internet start page is modified due to infection of potentially unwanted program, this setting prevents secondary infection through internet website. (No default setting)
[Fig. 88] ViRobot Policy - Scheduled Scan Setting Menu
Scheduled Scan List
¾ It enables VRIS to scan malware by the schedule specified in scheduled scan settings. (No default setting)
I. Add: When clicking ‘Add’, user can specify scheduled scan.
¾ Scheduled scan name: Scheduled scan name is specified.
¾ Elapsed time
¾ User can select the options with Daily, Weekly, Monthly, Only once, or Run the scan when screensaver is activated. (Default: Daily)
- If selecting Daily, ‘Time’ and ‘Items to scan’ are activated.
- If selecting Weekly, ‘Day’, ‘Time’, and ‘Items to scan’ are activated.
- If selecting Monthly, ‘Date’ ‘Time’, and ‘Items to scan’ are activated.
- If selecting Only once, ‘Date’ ‘Time’, and ‘Items to scan’ are activated.
- If selecting screensaver, ‘Items to scan’ is activated.
[Fig. 8910] ViRobot Policy - Add Scheduled Scan
I. Modify: Existing scheduled scan items can be edited. II. Delete: Existing scheduled scan items can be deleted
2.2.4.9 ViRobot Policy – Network Security – Internet Protection
Compressed file scan property for messenger protection is based on ViRobot policy-Scan settings- Generals-Scan setting for compressed file-Detailed settings. For compressed file scan size limit, multiple compress scan level, and compressed file type, see General scan-Advanced-Compressed file settings.
[Fig. 90] Virobot Policy Network Security - Internet Security Menu
① Block Phishing sites Use Anti-Phishing for sites
¾ It blocks phishing websites for access to safe websites. If user try to access to a phishing site URL that has been collected, it blocks the internet access, then displays blocking page. (Default: Enable)
Use Anti-Phishing Exception List
¾ Add: When user access to a website, it excludes to scan the website for phishing. It is input by URL in numerical order when registering it in permission list.