Total Traffic Control

What does the Security Agent Property Set Utility do?
This utility allows you to configure how Security Agent controls your desktop computers and their applications.

1. If creating a new Set, click the 'Create a new set' link. (If modifying an existing Set, select it from the pulldown and proceed to #3).
2. Name it in the field provided (e.g., Computer Tech SA Set).
3. Enable the appropriate settings.
4. Click the 'Save Settings' link.

The following explains the various options and links in the utility:

• Create a New Set - Click on this link to create a new Set. You can combine it with the Set Pulldown to create a new set based on an existing one.
• Set Pulldown - Click on the Set Pulldown to view or modify and existing Set, or create a new Set based on an existing one.
• Delete - Click on this link to delete the currently specified set. Use this option with care--TTC provides a warning when you attempt to use it.
• Save Settings - Click on the Save Settings link to save a new Set or save changes to an existing Set.

General Permissions

• Enforce program permissions security - Enable this option to configure SA to check all programs against the file integrity system before allowing execution.
• Prevent all unknown programs from running - Enable this option to configure SA to stop any program not in the file integrity database.

Program Permissions

• Allowed to talk on the network - Enable this option if you want SA to allow applications to communicate on your network.
• Allowed to accept incoming connections - Enable this option if you want SA to allow programs to accept communications requests from other computers.
• Allowed to write to other program's memory - Enable this option if you want SA to allow programs to write to another program's memory.
• Allowed to modify other programs on disk - Enable this option if you want SA to allow programs to modify other programs.
• Allowed to modify critical registry entries - Enable this option if you want SA to allow programs to make changes to the computer's registry.
• Allowed to execute other programs - Enable this option if you want SA to allow programs to start other programs.
• Allowed to access critical system files - Enable this option if you want SA to allow programs to access the computer's critical system files.

Virus Scanning Properties

• Block virus infected programs from running - Enable this option if you want SA to block virus-infected programs from executing .
• Scan the entire PC for viruses - Enable this option if you want SA to schedule and perform a scan on the day and time specified.
• What should the Security Agent do with a virus infected file after it has been blocked? - Enable Delete the file if you want SA to delete a virus infected file when detected by a scan. Enable Quarantine the file if you want SA to rename the file for later inspection. Enable Report Only if you want SA to only report that it found a virus infected file by a scan.
• Scan files by - Enable File extension if you want SA only scan executable type files, or Content and file extension to scan all types of files.
• Scan type - Enable Quick if you want SA to scan for viruses only, or Full if you want to scan for viruses and populate TTC's file integrity database.
• Maximum CPU% for Scan - This option allows you to control the amount of CPU used during a SA scan.
• Scan Exclusions - Enter file names and folders you don't want the Security Agent to scan.

Software and Virus Update Sources

• Security Agent Update Server - This option allows you to specify where you want Security Agents to pick up their updates.
• Backup Update Source - This option allows you to configure two backup sources for SA updates.
• Check for updates - This option allows you to specify how often you want SA to check for updates.

Removable Media

• Allow files to be opened for read access - Enable this option if you to set Read access permission to files on removable media.
• Allow files to be opened for write access - Enable this option if you to set Write access to files on removable media.
• Allow programs to be executed - Enable this option if you to allow programs to run from removable media.
• Report Removable Media access - Enable this option to report all removable media access to Total Traffic Control.

Desktop Content Filtering

• Enable desktop content filtering (Lightspeed Guide) - Enable this option if you want SA to content filter web access when the computer is off your network.
• Block unknown URLs - Enable this option if you want SA to block access to web sites not in the Content Filter.
• Block failed URL lookups - Enable this option if you want to block access to web sites not in the TTC Content Filter Database.
• Content Filtering Servers - Type in the public Domain or IP Address of your Total Traffic Control Server. You can specify multiple servers as backups.

Categories

• Allow All - Click the Allow All link to globally change all Program Categories to Allow.
• Block All - Click the Block All link to globally change all Program Categories to Block.
• Action - Select Allow to Allow all programs in the specified Category. Select Block to Block all programs in the specified Category.

User Identification

• Enable Identification Server - Enable this if your TTC implementation uses a User Identification server for end-user name resolution.
• Identification Server - If you enabled the Identification Server option, type in the IP or name of the Identification Server.

Advanced Option

• Report security events back to your update source - Enable this option if you want SA to report security events to your TTC Server.
• Show security events and alerts on client PCs - Enable this option if you want end users to see security alerts on the local desktop.
• Enable Interactive Alerts - Enable this option if you want the end-user to be able to act on an alert.
• Show system tray icon on client PCs - EWnable this option if you want the SA icon to display in the Windows System Tray.
• Show program permissions with file properties on client PCs - Enable this option if you want Windows to display an extended SA Permissions tab when viewing Properties of files.
• Allow remote monitoring of client PCs - Enable this option if you want to be able to interactively use Security Agent from your Total Traffic Control console.
• Disallow Security Agent properties changes by local administrators - Enable this option if you only want changes to SA Properties from your TTC Console.
• List of TTC Servers to update from (comma delimited list) - Enter the IP Addresses or names of Total Traffic Control Servers you want your Security Agents to update from.

TTC Policies - online Help