Knowledge Base

Support

Best Practice Configurations for Worry-Free Business Security (WFBS) to enhance protection against malware threats

Solution IDLast Updated
1039099Date : 2012/02/2 Time: 3:05 AM (PST)


Product/VersionPlatform
Worry-Free Business Security Standard/Advanced - 5.1, 6.0
Windows - 2000 Professional, 2000 Small Business Server, 2003 Home Server, 2003 Small Business Server, 2003 Standard Server Edition, 2008 Essential Business Server, 2008 Small Business Server, 7 32-bit, Vista 32-bit, XP Professional

Problem Description

This article shows you the best practice configuration settings for WFBS 5.0, 5.1, and 6.0 in order to enhance protection against malware threats.

Solution

For information on how to best configure WFBS against malware threat, please download the document for your version:

 
 
Best Practice Configurations for WFBS 6.0  - This document contains helpful information on the following topics:
 
    • Configuring Smart Scan

    • Configuring Real Time Scan Settings

    • Configuring Manual Scan Settings

    • Configuring Scheduled Scan Settings

    • Configuring Location Awareness for Web Reputation service (WRS)

    • Applying Enhanced GeneriClean

    • Disabling Roaming Mode

    • Configuring the Security Server to get the latest updates from Trend Micro

    • Making sure that all Security Agents are updated with the latest engine / pattern

    • Checking for unprotected computer using Trend Micro Vulnerability Scanner

    • Enabling Smart Feedback

    • Running Microsoft Baseline Security Analyzer 2.1 once a month to check for unpatched PCs

    • Disabling System Restore

    • Disabling AutoRun

    • Educating users not to click on links they do not trust
 
 
 
Best Practice Configurations for WFBS 5.0 / 5.1 - This document contains helpful information on the following topics:
    

Note: It is always recommended to upgrade to the latest version to get the optimal protection.

  

    • Applying the Latest Patch(es) for WFBS

    • Enabling Created/Modified and Retrieved option

    • Enabling Intellitrap

    • Enabling Realtime Antivirus and AntiSpyware Scan

    • Enabling Scan Network Drive

    • Enabling Custom Scan Action for Virus

    • Configuring Action for Spyware/Grayware Detections

    • Enabling Behavior Monitoring

    • Enabling Custom Scan Action for Generic Detection

    • Enabling Web Reputation Service (WRS)

    • Applying Enhanced GeneriClean

    • Configuring Real-Time Scan to Scan ALL files

    • Configuring Manual Scan to Scan ALL files

    • Disabling roaming mode

    • Making sure that all clients are updated with the latest engine/pattern

    • Checking for unprotected computers using Trend Micro Vulnerability Scanner

    • Running Microsoft Baseline Security Analyzer 2.1 to check for unpatched PCs

    • Disabling System Restore

    • Disabling AutoRun

    • Educating users not to click on links they do not trust

 
 
Related Information: Configuring Client Server Messaging Security for SMB (CSM) 3.6 for best protection against malware threat
   
   


Rate this Solution
Did this article help you?  
 
Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on