Configuring TruScan proactive threat scan settings for legacy clients
| Article:HOWTO55255 | | | Created: 2011-06-29 | | | Updated: 2011-12-17 | | | Article URL http://www.symantec.com/docs/HOWTO55255 |
Legacy clients cannot use SONAR settings. Instead, legacy clients use TruScan to detect unknown threats.
See Managing SONAR
By default, TruScan proactive threat scans detect Trojan horses, worms, and keyloggers. Also by default the detection response and sensitivity is determined by Symantec. For example, a detected process can be quarantined or logged. If you choose to configure the actions manually, you set a single action for detections. A detected process would always be quarantined or always logged depending on the action that you choose.
You can also set the action for commercial application detections.
Typically, you should not modify the default settings.
To configure TruScan proactive threat scan settings for legacy clients
Select TruScan Legacy Client Settings.
By default, the Scan Details, Detecting Commercial Applications, and Frequency settings are hidden.
Click the arrow icon to expand the settings for Scan Details.
Check or uncheck Scan for trojans and worms and Scan for keyloggers.
To change the actions or sensitivity for either risk type, uncheck Use defaults defined by Symantec.
Notifications are sent automatically if an action is set to Quarantine or Terminate. Use the Terminate action with caution. In some cases, you can cause an application to lose functionality.
Click the arrow icon to expand the settings for Detecting Commercial Applications.
Set the action for commercial keyloggers or commercial remote control programs.
Set one of the following options:
At the default scanning frequency
The scan engine software determines the scan frequency. This option is the default setting.
At a custom scanning frequency
If you enable this option, you can specify that the client scans new processes immediately when it detects them. You can also configure the scan frequency time.
|
|
Legacy ID
v44056185_v59371754
Article URL http://www.symantec.com/docs/HOWTO55255
Terms of use for this information are found in Legal Notices









Thank you.