OfficeScan Web Reputation technology tracks the credibility of web domains by assigning a reputation score based on factors such as a website's age, historical location changes and indications of suspicious activities discovered through malware behavior analysis. It will then continue to scan sites and block users from accessing infected ones.
This article details the steps in enabling and configuring the Web Reputation Service in OfficeScan.
- Log in to the OfficeScan web console.
- Go to Networked Computers > Client/Agent Management and then select the target client/agents from the client/agent tree
- Click Settings > Web Reputation Settings. You have the option to configure the settings for both external and internal computers to ensure that each user is protected even when roaming in unsecured networks.
To configure the Web Reputation policy
- On the management console, go to Networked Computers > Client/Agent Management and then select the target client/agents
- On the toolbar, click Settings > Web Reputation Settings.
- Verify that the "Enable Web reputation policy" check box is selected.
- Select the External Computers or the Internal Computers tab, depending on the policy that you want to configure.
- Select a security level. OfficeScan provides four security levels that determine whether the access to a URL will be blocked or allowed. These are:
- Low - Blocks only pages that are verified to be or suspected of being fraudulent or known sources of threat
- Medium-Low - Blocks pages that are verified to be or suspected of being fraudulent or known sources of threat
This security level is no longer present in OfficeScan 10.6.
- Medium - Blocks pages that are verified to be or suspected of being fraudulent or known sources of threat. This may include unrated pages.
- High - Blocks pages that are verified as fraudulent, sources of threat, spam or that are suspected of being so. This may include unrated pages.
- To submit Web Reputation feedback, use the URL noted on the management console to validate misclassified sites: Site Safety Center. The URL links to the Trend Micro Web Reputation Query system. This system provides details about blocked URLs and allows users to send Web Reputation feedback to Trend Micro.
- Select whether to Allow client/agents to send logs to the OfficeScan server. This option is available in both the internal and external configuration. You can use this option to analyze blocked URLs and later, add safe URLs to the approved URL list, which can be managed on the Global client/agent Settings page.
- Click Save once you are done configuring the settings.
For additional details regarding enabling Web Reputation in Officescan, vist the Officescan Online Help.
- Log in to the OfficeScan web console.
- Go to Agent > Agent Management and then select the target agents from the agent tree.
- Click Settings > Web Reputation Settings. You have the option to configure the settings for both external and internal computers to ensure that each user.
To configure the Web Reputation policy
- On the management console, go to Agent > Agent Management and then select the target agents.
- On the toolbar, click Settings > Web Reputation Settings.
- Verify that the "Enable Web reputation policy" check box is selected.
- Select the External Agents or the Internal Agents tab, depending on the policy that you want to configure.
- Select a security level. OfficeScan provides four security levels that determine whether the access to a URL will be blocked or allowed. These are:
- Low - Blocks only pages that are verified to be or suspected of being fraudulent or known sources of threat.
- Medium - Blocks pages that are verified to be or suspected of being fraudulent or known sources of threat. This may include unrated pages.
- High - Blocks pages that are verified as fraudulent, sources of threat, spam or that are suspected of being so. This may include unrated pages.
- To submit Web Reputation feedback, use the URL noted on the management console to validate misclassified sites: Site Safety Center. The URL links to the Trend Micro Web Reputation Query system. This system provides details about blocked URLs and allows users to send Web Reputation feedback to Trend Micro.
- Select whether to Allow Agents to send logs to the OfficeScan server. This option is available in both the internal and external configuration. You can use this option to analyze blocked URLs and later, add safe URLs to the approved URL list.
- Click Apply to All Agents once you are done configuring the settings.