User's Manual

Maintenance 83
Figure 38. Configuring virus attack detection settings
In order to enable the virus attack detection mechanism check the Register a
virus attack if the total number of viruses detected on the computers within
the logical network exceeds box and specify the values for the parameters that
determine the threshold of the virus activity level exceeding of which will be
considered increased virus activities and will cause the Virus attack event.
Event Virus attack is created based on the Virus detected event in the
operation of the anti-virus application. Therefore, in order to successfully detect
virus outbreak all information about the Virus detected event must be stored on
the Administration server. In order to do it the corresponding parameters in the
policies for all anti-virus applications must be appropriately configured (box Save
on the Administration server on the Events tab (see Figure 13) must be
checked).
Event Virus attack cannot be created more than once in 24 hours. You can re-
set information about the occurrence of such event only be restarting the Admini-
stration server service.