Product guide

To change the desktop firewall protection from Adaptive mode to Regular mode, click | McAfee
Endpoint Protection for Mac Preferences | Desktop Firewall | Regular Mode.
How DNS blocking works
You can create a list of domain names for which you want to block access.
Specify the domain names that you want to block. You can use ? and * wildcards to define the domain
names.
If the firewall host has not initiated any DNS queries for the blocked domains or FQDN, the DNS
blocking and FQDN-based rules do not work.
How stateful FTP inspection works
Desktop firewall can perform stateful inspection for the FTP protocol.
FTP involves two connections:
• Control for commands
• Data for the information
When a client connects to an FTP server, the control channel is established on FTP destination Port 21,
and an entry is made in the state table. If the option for FTP inspection was set with the Firewall
Options policy, when the firewall encounters a connection opened on Port 21, it knows to perform
stateful packet inspection on the packets coming through the FTP control channel.
4
Configuring protection preferences on a standalone Mac
Desktop firewall
46
McAfee Endpoint Protection for Mac 2.1.0 Product Guide