Specifications

Using the OfficeScan Firewall
7-13
OfficeScan comes with a default profile named "All clients profile", which uses the "All
access" policy. You can modify or delete this default profile. You can also create new
profiles. All default and user-created firewall profiles, including the policy associated to
each profile and the current profile status, display on the firewall profile list on the Web
console. Manage the profile list and deploy all profiles to OfficeScan clients. OfficeScan
clients store all the firewall profiles to the client computer.
To configure the firewall profile list:
PATH: NETWORKED COMPUTERS > FIREWALL > PROFILES
1. To add a new profile, click Add. To edit an existing profile, select the profile name.
A profile configuration screen appears. See Adding and Editing a Firewall Profile on
page 7-14 for more information.
2. To delete an existing policy, select the check box next to the policy and click Delete.
3. To change the order of profiles in the list, select the check box next to the profile to
move, and then click Move Up or Move Down.
OfficeScan applies firewall profiles to clients in the order in which the profiles
appear in the profile list. For example, if a client matches the first profile,
OfficeScan applies the actions configured for that profile to the client. OfficeScan
ignores the other profiles configured for that client.
Tip: The more exclusive a policy, the better it is at the top of the list. For example,
move a policy you create for a single client to the top, followed by those for a
range of clients, a network domain, and all clients.
4. To manage reference servers, click Edit Reference Server List.
Reference servers are computers that act as substitutes for the OfficeScan server
when it applies firewall profiles. A reference server can be any computer on the
network. OfficeScan makes the following assumptions when you enable reference
servers:
• Clients connected to reference servers are online, even if the clients cannot
communicate with the OfficeScan server.
• Firewall profiles applied to online clients also apply to clients connected to
reference servers.
See Reference Servers on page 8-14 for more information.