McAfee MANAGEMENT EDITION 2.5 Betriebsanweisung

McAfee Security for Microsoft SharePoint 2.5.0User Guide

• SharePoint Server 2010/SharePoint Foundation 2010 (64-bit).General • A CD-ROM drive (if installing from a CD).• Internet Explorer 7.0 browser or lat

You can use "SetSQLAct.exe" to modify your credentials in case of an incorrect entry whileinstalling McAfee Security for Microsoft SharePoin

6 McAfee Security for Microsoft SharePoint is installed on the default port 45900. Specify acustom port on which the Microsoft Internet Information Se

NOTE: Setting database account information applies only to:• Microsoft SharePoint Server 2003 and Windows SharePoint Services installations thatuse a

Usage is as follows:SetSqlAct.exe /USER=<username> /PASSWORD=<password> /DOMAIN=<domain>The Ready to Install the Application dialog

Testing the On-Access Scanner1 Launch the Microsoft SharePoint server.2 Copy the following line into its own file, then save the file with the name EI

ContentsRepairing the McAfee Security for Microsoft SharePoint InstallationUninstalling McAfee Security for Microsoft SharePointRepairing the McAfee S

6 Modify the Account Information as required. If the user credentials cannot be resolvedby the server, a warning dialog box appears prompting you to c

Getting Started with the User InterfaceIt is important for administrators to know how well their data on the SharePoint Server is beingprotected in re

ContentsStatistics and InformationScheduling a New On-demand ScanGraphical ReportsStatistics and InformationThis is the default section that appears o

COPYRIGHTCopyright © 2010 McAfee, Inc. All Rights Reserved.No part of this publication may be reproduced, transmitted, transcribed, stored in a retrie

You can also use the following options:• Reset — Click to reset the statistics of all detected items on your dashboard.•— Click the icon of the corres

4 Select the desired folder(s) and click >> to move the folder(s) from Available folders toFolders to scan.5 Select one of the following options

3 Select at least one filter; you can select up to three of the following filters:• Subject• Recipient• Reason• Ticket Number• Deleted Items4 Select A

4 Click Search. A list of viruses matching your search criteria is displayed in the View Resultspane.NOTE: Click Clear Filter to return to the default

Unwanted Content1 Click Detected Items | Unwanted Content.2 From the Unwanted Content screen, select up to three search filters:• Filename• Folder• De

• Submit a quarantined item to Avert if the option is enabled. Select a record from the ViewResults pane, then click Submit to Avert.NOTE: All quarant

Advanced ViewAdvanced View enables you to use the arrows in the Move column to change the order in whichany subpolicies are applied.You can use:• The

Policy SettingsYou can set up policies that determine how different types of threats are treated for differentgroups of users or databases stored on t

Specify UsersThe Specify Users tab allows you to specify policy rules for specific users.To create a new rule for a specific user:1 In Specify Users t

Weekdays•• Weekends• Working hours7 If you select Create a new time slot, specify a name for the new time slot and selectthe desired day(s) and time.8

ContentsIntroducing McAfee Security for Microsoft SharePoint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6Overview. . . . . . . . .

6 In Actions to take, you can view/edit a summary of the actions that will be taken in differentcircumstances. To change those actions, click Edit.NOT

• Find unknown macro viruses — to find unknown viruses in macros.• Enable Artemis technology — to enable McAfee's Artemis technology for safeguar

11 In PUPs, you can enable the PUP detection. Click on the disclaimer link and read thedisclaimer before enabling PUP detection option. You can also e

• PUPsNOTE: If you select the primary action as Replace item with an alert, you get an optionto create your Alert message.Primary and Secondary Action

Add rule — to create a new content rule for this policy.NOTE: For more information about creating a new content rule, refer to theAdding anew content

• Insert Image — to insert an image where the cursor is currently positioned. In ImageURL, type the location of the image. In Alternative text, type t

4 In Activation, select Enable to enable the file filtering scanner settings for the policy.TIP: For a true file type filtering, enable Content Scanni

10 In Take action when the file category is, specify the type of files that are affected by thisrule.NOTE: File types are divided into categories and

5 In Actions, click Edit to configure the actions that must be taken when corrupt content isdetected.TIP: For information on the available actions tha

digital signature is 'broken'. You cannot rely on the contents of the document because thecontents might have also been altered in other way

Settings and Diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Core Scanner Control Settings — to view a summary of the scanner control optionset that is used by default when no alternative scanner control option

6 If you select Create new set of options, enter a unique instance name. This field ismandatory.7 In Alert Options, use:• Alert format — to specify wh

• Create New — to create a new shared resource for a selected category.NOTE: For detailed information on Create New, refer to the sectionsCreating a n

7 Enter the Maximum scan time (minutes).8 Click Save.9 In the Alerts pane, select a Category.10 Click Create New and perform steps 5 - 9 of theCreatin

TasksCreating a New Content Scanner RuleCreating New File Filtering RuleCreating a New Content Scanner Rule1 In Policy Manager, click Shared Resource.

• View — to view the time slot of All the time.• Delete — to delete a time slot that is not used by any of the policies.• Edit — to change the name or

3 In Maximum item size (MB), specify the maximum size in megabytes an item stored in thedatabase can be.4 In Maximum query size (records), specify the

2 Click the Graph and Chart Settings tab.3 Select 3D to specify whether you want the graph on the dashboard to be displayed as athree-dimensional grap

8 Select Report exceptions to user to specify that the exceptions should be reported tothe administrator.9 Click the Event Logging tab.10 In Product L

2 From the Product Log section, select at least one of the following filters:• ID — Enter the ticket id which identifies a specific product log entry.

Creating Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

2 Click Export.3 Specify the location where the configuration file McAfeeConfigXML.cgf must be stored.4 Click Save.5 To import this configuration, bro

2 From the On Scan Failure drop-down menu, choose Allow Through to allow the documentsto get uploaded to the server or Prevent Upload to prevent the u

Integration with McAfee ePolicy Orchestrator4.0This chapter describes how to configure and manage McAfee Security for Microsoft SharePointusing McAfee

Checking in the McAfee Security for Microsoft SharePointPackage to ePolicy Orchestrator 4.0You can check in the McAfee Security for Microsoft SharePoi

• REMOTESQLPWD="password"• IISPORT=45900 (Optional)7 Schedule the task to run immediately or as required, then click Next to view a summaryo

Enforcing PoliciesCreating PoliciesUsing ePolicy Orchestrator 4.0, you can create, edit, delete, or assign a policy to specific group(s)or system(s) i

4 Click New Task. The Client Task Builder page appears.5 In Description, type a name, notes (optional) for the on-demand scan task.6 Select On Demand

Configuring ReportsReports are pre-defined queries which query the ePolicy Orchestrator database and generatea graphical output. McAfee ePolicy Orches

Uninstalling McAfee Security for Microsoft SharePoint from Managed NodesRemoving the McAfee Security for Microsoft SharePoint Packagefrom ePolicy Orch

Integration with McAfee ePolicy Orchestrator4.5This chapter describes how to configure and manage McAfee Security for Microsoft SharePointusing McAfee

Introducing McAfee Security for MicrosoftSharePointMcAfee Security for Microsoft SharePoint 2.5 (previously known as McAfee PortalShield) providescomp

Installing ExtensionsInstalling McAfee Security for Microsoft SharePoint on Managed NodesChecking in the McAfee Security for Microsoft SharePointPacka

6 In Configuration, select Windows as Target Platforms, McAfee Security for MicrosoftSharePoint 2.5.0 as Products and components, and Install as Actio

Setting Policies using ePolicy Orchestrator 4.5ePolicy Orchestrator 4.5 allows you to enforce policies across multiple managed nodes. Thesepolicies ov

7 Configure settings for detected items, user interface preferences, diagnostics, DAT, anduser (on-access scanner), then click Save.TIP: For option de

6 In Choose what to scan, type the Web Application Name and Target Folder Path and click>> to move the folder(s) to Folders to scan.Example 1:We

9 Select one of the following options:• Off — To schedule a normal on-demand scan task without resumable and incrementalscan options.• Resumable Scann

Running a QueryCreating a New Query1 Log on to the ePolicy Orchestrator server as an administrator.NOTE: If the pre-defined queries on the left side d

Uninstalling McAfee Security for MicrosoftSharePoint using ePolicy Orchestrator 4.5You can remove the product package and extensions from ePolicy Orch

7 Schedule the task to run immediately or as required, then click Next to view a summaryof the task.8 Click Save, then send an agent wake-up call.TIP:

Appendix A — A Typical Scenario of Creatingand Using File Filtering Rule and ActionsThis section provides a real-time scenario where you might want to

DescriptionFeaturesSupport for Microsoft SharePoint Server versions 2003, 2007, and 2010 througha single installer.Consolidated support for MicrosoftS

• To select more than one subcategory, use Ctrl+Click or Shift+Click.• To select all of the subcategories, select All.• To undo selections in subcateg

Appendix B — Recommended ConfigurationsThis section gives some recommendations you can follow to configure and use your McAfeeSecurity for Microsoft S

IndexAaction taken 22activation 29, 33, 39, 40add application pools 50add scanner/filter 28Add/Remove Programs 16advanced 30advanced view 25, 26adware

ePolicy Orchestrator 4.5(continued)remove extensions 67schedule scan 63setting up policies 62uninstall McAfee Security for Microsoft SharePoint 67unin

pie angle 46pie-chart 19policiesePolicy Orchestrator 4.0 54ePolicy Orchestrator 4.5 62policy enforcementePolicy Orchestrator 4.5 63policy manager 18,

DescriptionFeaturesSupport for customizing the Internet Information Services port during installation,where the web interface must be hosted.Support f

InstallationInstalling McAfee Security for Microsoft SharePoint is very simple. Following sections includeimportant information to be considered befor