User`s guide

Trend Micro™ Web Protection Module 1.0 Administrator’s Guide
2-34
FAQs
What is the performance impact of the Web Protection Module Agent on
network performance?
The Web Protection Module Agent is very lightweight and requires no pattern updates.
It checks for Web threats when the user accesses the Internet by performing a lookup
on an “in-the-cloud” database. The Web Protection Module Agent uses the site’s
“reputation” score and a security level set by the Console Operator to block access to
suspicious sites. Web Protection Module database lookups are optimized to use very
little bandwidth (similar in size to a DNS lookup) and have a negligible impact on
network performance.
Does the Web Protection Module Agent run on server class computers?
Yes. It fully supports systems running Windows 2000 Server, Windows Server 2003 and
Windows Server 2008.
Can Web Protection Module logs be used with other event systems for
correlation and long term storage?
Yes. The Web Protection Module solution fully supports integration with SIM, SIEM, or
log parsing systems. Web Protection Module URL history and blocked URL logs can
either be pulled directly from the ESP server or from the individual Agents themselves.
How long does it take the Web Protection Module Agent to upload logs
and what happens if the Agent is disconnected from the network?
The interval that the agent uses to send logs to the server is configurable, but the default
is once per day. If the agent is not connected to the network, it uploads copies of the
logs the next time it is connected to the network.
Can the user disable the Web Protection Module Agent?
Only when the user has administrative rights to their computer.