Configuring a centralized exception for a detected process

Article:HOWTO27608  |  Created: 2010-01-09  |  Updated: 2010-01-20  |  Article URL http://www.symantec.com/docs/HOWTO27608
Article Type
How To

Product(s)

Environment


Configuring a centralized exception for a detected process

You can create an exception for a process that TruScan proactive threat scans detect.

When you create an exception for a detected process, you choose from a list of detections. The management console populates the list with the detections that the client logs in your security network.

The detection list appears empty if the client computers in your network have not yet made any detections.

You can force proactive threat scans to detect a particular process. When a proactive threat scan detects the process, and the management console receives the event, the process appears in the detected process list.

See Configuring an exception to force TruScan proactive threat scans to detect a process.

To configure a centralized exception for a detected process

  1. On the Centralized Exceptions Policy page, click Centralized Exceptions.

  2. Click Add > Windows Exceptions > TruScan Proactive Threat Scan Exceptions > Detected Processes.

  3. Select the processes for which you want to create an exception.

  4. In the Action drop-down box, select Ignore, Terminate, Quarantine, or Log only.

  5. Click OK.

  6. If you are finished with the configuration for this policy, click OK.


Legacy ID



350028


Article URL http://www.symantec.com/docs/HOWTO27608


Terms of use for this information are found in Legal Notices