Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Using the Web Reputation Services (WRS) in OfficeScan (OSCE)

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 2000 Advanced Server
    • Windows 2000 Server
    • Windows 2003 Enterprise Server
    • Windows 2003 Standard Server Edition
Summary

Configure the WRS which allows OfficeScan to detect and block access on sites harboring web-based threats.

Details
Public

When a client requests a URL, the reputation score is checked first by the Trend Micro reputation servers. Access to the URL is allowed or denied depending on the score and security level you configured.

To configure the WRS:

  1. Log on to OfficeScan web console.
  2. Go to any of the following:
    • For OfficeScan 10.x: Go to Networked Computers > Web Reputation > Computer Location.
    • For OfficeScan 11.0/XG: Go to Agents > Endpoint Location.
  3. Enter the IP address of your internal gateway and click Add.
     

    For OfficeScan 10.x:

    Enter the Gateway IP address

    For OfficeScan 11.0/XG:

    Add gateway IP address 

  4. Click Save.
  5. Navigate to Networked Computers > Web Reputation > Policies.
  6. If you are using OfficeScan 10.x, click the External Computers or Internal Computers tab. If you are using OfficeScan 11.0/XG, click External Agents or Internal Agents.
  7. If you are using OfficeScan 10.x, tick the "Enable Web Reputation policy (will be applied to all computers if no computer location settings are defined)" check box.

    Enable Web Reputation policy check box

    If you are using OfficeScan 11.0/XG, tick the "Enable Web reputation policy on the following operating systems:" checkbox.

    Enable web reputation policy on the following operating systems:

  8. Select the security level for the policy.
    • Low - Blocks only pages that are verified to be or suspected of being fraudulent or known sources of threat.
    • Medium - Blocks pages that are verified to be or suspected of being fraudulent or known sources of threat. This may include unrated pages.
    • High - Blocks pages that are verified as fraudulent, sources of threat, spam or that are suspected of being so. This may include unrated pages.

    For OfficeScan 10.x:

    Policy security level

    For OfficeScan 11.0/XG:

    Select the security level (OfficeScan 11.0 / 12.0) 

  9. For OfficeScan 10.x, on the Approved URL List add the URLs of the websites you want to allow and select whether to approve all subsites or the specific page only. By default, Trend Micro and Microsoft websites are included in the list.

    Approved URL List

    For OfficeScan 11.0/XG, there is another feature of WRS: Enable approved/blocked list. Tick the check box to enable this feature. On the Approved URL List, add the URLs of the websites you want to allow and select whether to approve all subsites or the specific page only. By default, Trend Micro and Microsoft websites are included in the list.

    Approved/Blocked URL List 

  10. You may opt to select the option "Allow clients to send logs to the OfficeScan server" in OfficeScan 10.x or "Allow agents to send logs to the OfficeScan server" in OfficeScan 11.0/XG to analyze URLs blocked by the WRS.
     

    To submit Web Reputation feedback, use the URL noted on the management console to validate misclassified sites: Site Safety Center.

    The URL links to the Trend Micro Web Reputation Query system. This system provides details about blocked URLs and allows users to send Web Reputation feedback to Trend Micro.

  11. Click Save.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1036039
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.