Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Blocking web threats using the Web Reputation Service (WRS) in OfficeScan (OSCE)

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Standard Server Edition
    • Windows 2008 Enterprise Server
    • Windows 2008 Standard Server Edition
    • Windows 2012 Enterprise
    • Windows 2016
Summary

OfficeScan Web Reputation technology tracks the credibility of web domains by assigning a reputation score based on factors such as a website's age, historical location changes and indications of suspicious activities discovered through malware behavior analysis. It will then continue to scan sites and block users from accessing infected ones. 

This article details the steps in enabling and configuring the Web Reputation Service in OfficeScan.

Details
Public
 
To enable the Web Reputation Service, you must have a valid activation code.
  1. Log in to the OfficeScan web console.
  2. Go to Networked Computers > Client/Agent Management and then select the target client/agents from the client/agent tree
  3. Click Settings > Web Reputation Settings. You have the option to configure the settings for both external and internal computers to ensure that each user is protected even when roaming in unsecured networks.

To configure the Web Reputation policy

  1. On the management console, go to Networked Computers > Client/Agent Management and then select the target client/agents
  2. On the toolbar, click Settings > Web Reputation Settings.
  3. Verify that the "Enable Web reputation policy" check box is selected.
  4. Select the External Computers or the Internal Computers tab, depending on the policy that you want to configure.
  5. Select a security level. OfficeScan provides four security levels that determine whether the access to a URL will be blocked or allowed. These are:
    • Low - Blocks only pages that are verified to be or suspected of being fraudulent or known sources of threat
    • Medium-Low - Blocks pages that are verified to be or suspected of being fraudulent or known sources of threat
       
      This security level is no longer present in OfficeScan 10.6.
    • Medium - Blocks pages that are verified to be or suspected of being fraudulent or known sources of threat. This may include unrated pages.
    • High - Blocks pages that are verified as fraudulent, sources of threat, spam or that are suspected of being so. This may include unrated pages.
  6. To submit Web Reputation feedback, use the URL noted on the management console to validate misclassified sites: Site Safety Center. The URL links to the Trend Micro Web Reputation Query system. This system provides details about blocked URLs and allows users to send Web Reputation feedback to Trend Micro.
  7. Select whether to Allow client/agents to send logs to the OfficeScan server. This option is available in both the internal and external configuration. You can use this option to analyze blocked URLs and later, add safe URLs to the approved URL list, which can be managed on the Global client/agent Settings page.
  8. Click Save once you are done configuring the settings.

For additional details regarding enabling Web Reputation in Officescan, vist the Officescan Online Help.

 
To enable the Web Reputation Service, you must have a valid activation code.
  1. Log in to the OfficeScan web console.
  2. Go to Agent > Agent Management and then select the target agents from the agent tree.
  3. Click Settings > Web Reputation Settings. You have the option to configure the settings for both external and internal computers to ensure that each user.

To configure the Web Reputation policy

  1. On the management console, go to Agent > Agent Management and then select the target agents.
  2. On the toolbar, click Settings > Web Reputation Settings.
  3. Verify that the "Enable Web reputation policy" check box is selected.
  4. Select the External Agents or the Internal Agents tab, depending on the policy that you want to configure.
  5. Select a security level. OfficeScan provides four security levels that determine whether the access to a URL will be blocked or allowed. These are:
    • Low - Blocks only pages that are verified to be or suspected of being fraudulent or known sources of threat.
    • Medium - Blocks pages that are verified to be or suspected of being fraudulent or known sources of threat. This may include unrated pages.
    • High - Blocks pages that are verified as fraudulent, sources of threat, spam or that are suspected of being so. This may include unrated pages.
  6. To submit Web Reputation feedback, use the URL noted on the management console to validate misclassified sites: Site Safety Center. The URL links to the Trend Micro Web Reputation Query system. This system provides details about blocked URLs and allows users to send Web Reputation feedback to Trend Micro.
  7. Select whether to Allow Agents to send logs to the OfficeScan server. This option is available in both the internal and external configuration. You can use this option to analyze blocked URLs and later, add safe URLs to the approved URL list.
  8. Click Apply to All Agents once you are done configuring the settings.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1054949
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.