From eScan Wiki

(Difference between revisions)

Current revision

· eScan · MailScan · Technologies

· Technical Info · Security Awareness · User Guides

[edit]

eScan Version 11 (and above) Online Help

Back

1 eScan Version 11 (and above) Online Help
2 Endpoint Security
3 DLP (Attachment Control)

[edit]

Endpoint Security

This module protects your computer or endpoints from data thefts and security threats through USB or FireWire® based portable devices. It comes with an Application control feature, which helps you block unwanted

applications from running on your computer. In addition, this feature provides you with a comprehensive reporting feature that helps you determine which applications and portable devices are allowed or blocked by

eScan.

This page provides you with information regarding the status of the module and options for configuring it.

Start / Stop: It enables you to enable or disable Endpoint Security module. Click the appropriate option.

There are two tabs as follows – Application Control and Device Control

1. Application Control

This tab helps you control the execution of programs on the computer. All the controls on this tab are disabled by default.

You can configure the following settings.

Enable Application Control: You should select this check box if you need to enable the Application Control feature of the Endpoint Security module.

I. Block List

Enter Application to Block: Enter the name of the application to be blocked from execution.
List of Blocked Applications: This list contains blocked executables of applications that are predefined by MicroWorld. Each of the applications listed in the predefined categories are blocked by default. In addition, you can also add executables that you need to block only to the Custom Group category. If you want, you can unblock the predefined application by selecting the UnBlock' option. The predefined categories include computer games, instant messengers, music & video players, and P2P applications.

II. White List

Enable White Listing: Select thic check box to enable the whitelisting feature of the endpoint Security module
Enter Application to whitelist: Enter the name of the application to be whitelisted / allowed.
White Listed Applications: This list contains whitelsited applications that are predefined by Microworld. Each of the applications listed in the predefined categories are allowed by default. If you want to block the predefined categories select the block option.

III. Define Time Restrictions

This option will allow you to Enable / Disable application control feature. This feature helps you to define time restriction when you want to allow or block access to the applications based on specific days and between pre-defined hours during a day. For example - The administartor can block computer games, instant messengers, for the whole day but allow during lunch hours i.e. 1 - 2 pm without violating the Application Control Policies.

2. Device Control The Endpoint Security feature of eScan protects your computer from unauthorized portable storage devices prompting you for the password whenever you plug in such devices. The devices are also scanned immediately when connected to prevent any infected files running and infecting the computer.

You can configure the following settings:

Enable Device Control: [Default] You should select this check box if you need to monitor all the USB storages devices connected to your computer. This will enable all the options on this tab.

USB Settings: This section helps you customize the settings for controlling access to USB storage devices.

Block USB Ports: Select this check box if you want to block all the USB ports.
Ask for Password: Select this check box, if you want eScan to prompt for a password whenever a USB storage device is connected to the computer. You have to type the correct password to access USB storage device. It is recommended that you always keep this check box selected.

Use eScan Administrator Password: This option is enabled only when you select the Ask for Password check box. Click this option if you want to assign eScan Administrator password for accessing USB storage device.
Use Other Password: This option is available only when you select the Ask for Password check box. Click this option if you want assign a unique password for accessing USB storage device.

Do Virus Scan: [Default] When you select this check box, the Endpoint Security module runs a virus scan if the USB storage device is activated. It is recommended that you always keep this check box selected.
Read Only USB: Select this check box, if you want to allow access of the USB device in read-only mode.
Allow user to cancel scan: Select this check box to allow the user to cancel the scanning process of the USB device.
Disable AutoPlay: [Default] When you select this check box, eScan disables the automatic execution of any program stored on a USB storage device when you connect the device.

Record Files Copied To USB: Select this check box, if you want eScan to create a record of the files copied from the system to USB drive.
Record Files Copied To Network: Select this check box, if you want eScan to create a record of the files copied from managed endpoint to the network drive connected to it.
Record Files Copied To Local: Select this check box, if you want eScan to create a record of the files copied from the one drive to another drive of the system. Please note that if you have Selected " Ignore System Drive" along with this option no record will be captured if the Files are copied from system drive (the drive in which OS is installed) to another drive.
Ignore System Drive: Select this check box in case of you do not want eScan to record files that are copied from System drive of managed endpoint to either network drive or any local drive.

Whitelist: eScan provides a greater level of endpoint security by prompting you for a password whenever you connect a USB drive. To disable password protection for a specific device, you can add it along with its serial number to the whitelist. The next time you connect the device it will not ask for a password but will directly display the files or folders stored on the device. This section displays the serial number and device name of each of the whitelisted devices in a list. You can add devices to this list by clicking on the Add button. The Whitelist section displays the following button.

Scan Whitelisted USB Devices: By default, eScan does not scan whitelisted USB devices. You should select this option, if you want eScan to scan USB devices that have been added to the whitelist.
You can click on the Add button to enter the Serial number (unique for each USB device ) and Device Name of the USB device to be whitelisted. The Serial Number and the Device Name details are shown in Endpoint security module in eScan Protection Center under the same sub-section. You need to insert the USB device on the eScan server and copy the details onto the eScan web console settings.
Disable Web Cam: Select this option to Disable Webcams connected
Disable SD Cards: Select this option to disable the SD cards
Disable Bluetooth: Select this option to disable Bluetooth
Block Attachments: Select this option to block all attachments.

Default

Note:- Click the Default button, if you want to apply default settings, which are done during installation of eScan. It loads and resets the values to the default settings.

[edit]

DLP (Attachment Control)

The DLP (Attachment Control) feature lets you control attachment flow within your organization. You can block/allow all attachments the user tries to send through specific processes that can be defined. You can exclude specific domains/subdomains that you trust, from being blocked even if they are sent though the blocked processes mentioned before.

You can configure the following settings:

Attachment Allowed

Select this option if you want attachments to be allowed through all processes except a specific set of processes mentioned below.

Attachment Blocked

Select this option if you want attachments to be blocked through all processes except a specific set of processes mentioned below.

Enter Process Name

Enter the name of the processes that should be excluded from the above selection.

Blacklisted Process

This will display a list of process you excluded when you selected the Attachment Allowed option. eScan will block all attachments through this process.

Whitelisted Process

This will display a list of process you excluded when you selected the Attachment Blocked option. eScan will allow all attachments through this process.

Enter Site Name

Enter the name of the websites through which attachments should be allowed irrespective of the above settings.

Whitelisted Sites

The websites added above to be whit listed are displayed in this list.

Retrieved from "https://wiki.escanav.com/wiki/index.php/Escan/english/escan11/eScan_Management_Console/Policies/Features_Help/Endpoint-Security"

 |style="text-align:right;"|&nbsp;&nbsp;'''·''' [[Technical Info|<font size=1.5 color="blue">Technical Info</font>]]&nbsp;&nbsp;'''·''' [[Escan/english/Security_Awareness|<font size=1.5 color="blue">Security Awareness</font>]]&nbsp;&nbsp;'''·''' [[User_Guides|<font size=1.5 color="blue">User Guides</font>]]
 |}
+<h2  id="mp-tfp-h2" style="margin:0; background:#C7E587; font-size:120%; font-weight:bold; border:10 solid #afa3bf; text-align:left; color:#000; padding:0.2em 0.4em">eScan Version 11  (and above) Online Help</h2>
+{| class="wikitable" border="0"
+|-
+|width="1000pt"|
+|}
+<span class="plainlinks neverexpand"><div style="text-align: right;">[[Escan/english/escan11|Back]]</div></span><br/>
 __TOC__
 <br>
 <br><br>
-Endpoint Security is a part of eScan’s Protection feature. This module protects your computer or Endpoints from data thefts and security threats through USB or FireWire® based portable devices. It comes with an Application control feature, which helps you block unwanted applications from running on your computer. In addition, this feature provides you with a comprehensive reporting feature that helps you determine which applications and portable devices are allowed or blocked by eScan.
+This module protects your computer or endpoints from data thefts and security threats through USB or FireWire® based portable devices. It comes with an Application control feature, which helps you block unwanted
+applications from running on your computer. In addition, this feature provides you with a comprehensive reporting feature that helps you determine which applications and portable devices are allowed or blocked by
+eScan.
 This page provides you with information regarding the status of the module and options for configuring it.
 * '''Start / Stop:''' It enables you to enable or disable '''Endpoint Security''' module. Click the appropriate option.
-There are two tabs – Application Control and USB Control, which are as follows:
+There are two tabs as follows – Application Control and Device Control
 '''1. ''Application Control'''''
 ::::* '''Enable Application Control: '''You should select this check box if you need to enable the Application Control feature of the Endpoint Security module.
-::::* '''Enter Application to Block:''' It indicates the name of the application you want to block from execution. Type the full name of the application to be blocked.
-::::* '''List of Blocked Applications: '''This list contains blocked executables of applications that are predefined by MicroWorld. Each of the applications listed in the predefined categories are blocked by default. In addition, you can also add executables that you need to block only to the Custom Group category. If you want, you can unblock the predefined application by clicking the '''UnBlock''' link. The predefined categories include computer games, instant messengers, music video players, and P2P applications.
-'''2. ''USB Control '''''
+'''I.  Block List'''
+::::* '''Enter Application to Block:''' Enter the name of the application to be blocked from execution.
+::::* '''List of Blocked Applications: '''This list contains blocked executables of applications that are predefined by MicroWorld. Each of the applications listed in the predefined categories are blocked by default. In addition, you can also add executables that you need to block only to the Custom Group category. If you want, you can unblock the predefined application by selecting the ''UnBlock''' option. The predefined categories include computer games, instant messengers, music & video players, and P2P applications.
+'''II.  White List'''
+::::* '''Enable White Listing:''' Select thic check box to enable the whitelisting feature of the endpoint Security module
+::::* '''Enter Application to whitelist:''' Enter the name of the application to be whitelisted / allowed.
+::::* '''White Listed Applications:''' This list contains whitelsited applications that are predefined by Microworld. Each of the applications listed in the predefined categories are allowed by default. If you want to block the predefined categories select the block option.
+'''III.  Define Time Restrictions'''
+:::* This option will allow you to Enable / Disable application control feature. This feature helps you to define time restriction when you want to allow or block access to the applications based on specific days and between pre-defined hours during a day. '''For example -''' The administartor can block computer games, instant messengers, for the whole day but  allow during lunch hours i.e. 1 - 2 pm without violating the Application Control Policies.
+'''2. ''Device Control '''''
 The Endpoint Security feature of eScan protects your computer from unauthorized portable storage devices prompting you for the password whenever you plug in such devices. The devices are also scanned immediately when connected to prevent any infected files running and infecting the computer.
 You can configure the following settings:
-* '''Enable USB Control: ''[Default]''''' You should select this check box if you need to monitor all the USB storages devices connected to your computer. This will enable all the options on this tab.
+* '''Enable Device Control: ''[Default]''''' You should select this check box if you need to monitor all the USB storages devices connected to your computer. This will enable all the options on this tab.
-::::* '''Settings:''' This section helps you customize the settings for controlling access to USB storage devices.
+::::* '''USB Settings:''' This section helps you customize the settings for controlling access to USB storage devices.
 ::::::::* '''Block USB Ports: '''Select this check box if you want to block all the USB ports.
 ::::::::* '''Ask for Password:''' Select this check box, if you want eScan to prompt for a password whenever a USB storage device is connected to the computer. You have to type the correct password to access USB storage device. It is recommended that you always keep this check box selected.
-::::::::* '''Use eScan Administrator: '''This option is available only when you select the '''Ask for Password''' check box. Click this option if you want to assign eScan Administrator password for accessing USB storage device.
+::::::::* '''Use eScan Administrator Password: '''This option is enabled only when you select the '''Ask for Password''' check box. Click this option if you want to assign eScan Administrator password for accessing USB storage device.
 ::::::::* '''Use Other Password: '''This option is available only when you select the '''Ask for Password''' check box. Click this option if you want assign a unique password for accessing USB storage device.
 ::::::::* '''Do Virus Scan: ''[Default]''''' When you select this check box, the Endpoint Security module runs a virus scan if the USB storage device is activated. It is recommended that you always keep this check box selected.
-::::::::* '''Disable AutoPlay: ''[Default]''''' When you select this check box, eScan disables the automatic execution of any program stored on a USB storage device when you connect the device.
 ::::::::* '''Read Only   USB: '''Select this check box, if you want to allow access of the USB device in read-only mode.
-::::::::* '''Record Files Copied To USB: '''Select this check box, if you want eScan to create a record of the files copied from the system to USB drive.
+::::::::* '''Allow user to cancel scan:''' Select this check box to allow the user to cancel the scanning process of the  USB device.
+::::::::* '''Disable AutoPlay: ''[Default]''''' When you select this check box, eScan disables the automatic execution of any program stored on a USB storage device when you connect the device.
+::::::::* '''Record Files Copied To USB: '''Select this check box, if you want eScan to create a record of the files copied from the system to USB drive.
+::::::::* '''Record Files Copied To Network: ''' Select this check box, if you want eScan to create a record of the files copied from managed endpoint to the network drive connected to it.
+::::::::* '''Record Files Copied To Local: '''Select this check box, if you want eScan to create a record of the files copied from the one drive to another drive of the system. Please note that  if you have Selected " Ignore System Drive" along with this option no record will be captured if the Files are copied from system drive (the drive in which OS is installed) to another drive.
+::::::::* '''Ignore System Drive: ''' Select this check box in case of you do not want eScan to record files that are copied from System drive of managed endpoint to either network drive or any local drive.
 ::::* '''Whitelist:''' eScan provides a greater level of endpoint security by prompting you for a password whenever you connect a USB drive. To disable password protection for a specific device, you can add it along with its serial number to the whitelist. The next time you connect the device it will not ask for a password but will directly display the files or folders stored on the device. This section displays the serial number and device name of each of the whitelisted devices in a list. You can add devices to this list by clicking on the '''Add '''button. The '''Whitelist''' section displays the following button.
 ::::::::* '''Scan Whitelisted USB Devices: '''By default, eScan does not scan whitelisted USB devices. You should select this option, if you want eScan to scan USB devices that have been added to the whitelist.''' '''
 ::::::::* You can click on the '''Add ''' button to enter the '''Serial number''' (unique for each USB device ) and '''Device Name ''' of the USB device to be whitelisted. The Serial Number and the Device Name details are shown in  Endpoint security module in eScan Protection Center under the same sub-section. You need to insert the USB device on the eScan server and copy the details onto the eScan web console settings.
+::::::::* '''Disable Web Cam:''' Select this option to Disable Webcams connected
+::::::::* '''Disable SD Cards:''' Select this option to disable the SD cards
+::::::::* '''Disable Bluetooth:''' Select this option to disable Bluetooth
+::::::::* '''Block Attachments:''' Select this option to block all attachments.
 '''Default'''
 :::'''Note:-''' Click the Default button, if you want to apply default settings, which are done during installation of eScan. It loads and resets the values to the default settings.
+<h1 style="margin-top:0in;margin-right:0in;margin-bottom:.0001pt;margin-left:0in;line-height:110%;font-size:19px;font-family:&quot;Cambria&quot;,&quot;serif&quot;;color:#365F91;"><span style="font-size: 36px; line-height: 110%; color: rgb(65, 168, 95); font-weight: normal; font-family: Calibri, sans-serif;">DLP (Attachment Control)</span></h1>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family: Calibri, sans-serif; font-size: 16px;">The DLP (Attachment Control) feature lets you control attachment flow within your organization. You can block/allow all attachments the user tries to send through specific processes that can be defined. You can exclude specific domains/subdomains that you trust, from being blocked even if they are sent though the blocked processes mentioned before.</span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-size: 16px; font-family: Calibri, sans-serif;">You can configure the following settings:</span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>&nbsp;</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>Attachment Allowed</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;">Select this option if you want attachments to be allowed through all processes except a specific set of processes mentioned below.</span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;">
+      <br>
+    </span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>Attachment Blocked</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;">Select this option if you want attachments to be blocked through all processes except a specific set of processes mentioned below.</span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>&nbsp;</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>Enter Process Name</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;">Enter the name of the processes that should be excluded from the above selection.</span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>&nbsp;</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>Blacklisted Process</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;">This will display a list of process you excluded when you selected the<strong>&nbsp;Attachment Allowed&nbsp;</strong>option<strong>.&nbsp;</strong>eScan will block all attachments through this process.</span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>&nbsp;</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size: 16px;"><strong>Whitelisted Process</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;">This will display a list of process you excluded when you selected the<strong>&nbsp;Attachment Blocked&nbsp;</strong>option<strong>.</strong> eScan will allow all attachments through this process.</span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>&nbsp;</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>Enter Site Name</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;">Enter the name of the websites through which attachments should be allowed irrespective of the above settings.</span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size: 16px;"><strong>&nbsp;</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family:
+        Calibri, sans-serif;"><span style="font-size:
+px;"><strong>Whitelisted Sites</strong></span></span></p>
+<p style="margin: 0in 0in 0.0001pt; line-height: 1.15; font-size: 15px; font-family: &quot;Open Sans&quot;, sans-serif;"><span style="font-family: Calibri, sans-serif; font-size: 16px;">The websites added above to be whit listed are displayed in this list.</span></p>

From eScan Wiki

Current revision

eScan Version 11 (and above) Online Help

Contents

Endpoint Security

DLP (Attachment Control)

Main Page

Latest Developments

Product Information

Knowledge Base

For Windows Downloads

For Linux Downloads

For MAC Downloads

General

Support

Views