内容文本教程教案101培训ens106module firewall.pptxVIP

Endpoint Security 10.6 – 201 TrainingModule 5:FirewallPaul Luetje | Enterprise Technology Specialist - EndpointEndpoint SecurityThreat Prevention ModuleOAS, ODS, Exploit Prevention, and Access ProtectionFirewall ModuleBased on HIPS FirewallWeb Control ModuleBased on SiteAdvisor? Enterprise and WFE Adaptive Threat Protection ModuleThreat Intelligence, Dynamic App Containment, and Real ProtectWeb ControlFirewall ePO ENSCollaborative FrameworkAdaptive Threat ProtectionThreat PreventionCentrally managed using ePOClient UI What does the Firewall module do?Source: /en-us/library/dd421709(v=ws.10).aspx/en-us/library/dd421709(v=ws.10).aspx/en-us/library/dd421709(v=ws.10).aspx/en-us/library/dd421709(v=ws.10).aspxYou create firewall rules to allow this computer to send traffic to, or receive traffic from, programs, system services, computers, or users. Firewall rules can be created to take one of three actions for all connections that match the rules criteria:Allow the connection.Allow a connection only if it is secured through the use of Internet Protocol security (IPsec).Block the connection.Rules can be created for either inbound traffic or outbound traffic. The rule can be configured to specify the computers or users, program, service, or port and protocol. You can specify which type of network adapter the rule will be applied to: local area network (LAN), wireless, remote access, such as a virtual private network (VPN) connection, or all types. You can also configure the rule to be applied when any profile is being used or only when a specified profile is being used.Firewall: Basic OptionsEnable/Disable FirewallProtection OptionsDNS BlockingFirewall: Advanced OptionsTuning OptionsReputation-based network blockingBlock Untrusted ExecutablesLeverages the Reputation BO (new to 10.6)Incoming/Outgoing Reputation ThresholdsStateful Firewall SettingsFirewall Status ControlAllow Users to disable firewall and prompt them for reasoningDefined NetworksTrusted/Not TrustedTruste