User's Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
Content Filtering and Optimizing Scans 4-47
v1.0, September 2009
Setting Scanning Exclusions
To save resources, you can configure scanning exclusions for IP addresses and ports that you know
are secure. For example, if your network includes a Web server that hosts Web pages that are
accessible by anyone on the Internet, the files that are hosted by your Web server do not need to be
scanned. To prevent the STM from scanning these files, you can configure a scanning exclusion
for your Web server.
To configure scanning exclusion rules:
1. Select Global Settings > Scanning Exclusions from the menu. The Scanning Exclusions
screen displays. This screen shows the Scanning Exclusions table, which is empty if you have
not specified any exclusions. (Figure 4-23 shows one exclusion rule in the table as an
example.)
2. In the Scanning Exclusions section of the screen, specify an exclusion rule as explained in
Table 4-16.
Figure 4-23
Table 4-16. Add Scanning Exclusion Settings
Setting Description
Client IP The client IP address and optional subnet mask that are excluded from all scanning.
Destination IP The destination IP address and optional subnet mask that are excluded from all
scanning.
Port The port number that is excluded from all scanning.
Brief Description A description of the exclusion rule for identification and management purposes.