Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

9.1.1 Action implementation methods

Actions for clients with a high security level are implemented in the following two ways:

• By security level judgment results
  Actions are implemented by action policy when the following security level judgments are performed:
  
  • Automatic judgment when inventory information is updated
  • Judgment by periodic task execution
• By an administrator
  An administrator can perform the following three types of actions:
  
  • Implementing an action from the Client Security Management window
    An administrator can use the PC Search window to search for clients, and perform actions for those judged to be at risk. For example, if warning messages have been sent based on an action policy but still there are clients for which no measures have been taken, an administrator can implement an action manually. In this case, warning messages can be sent and the clients forced to disconnect from the network, irrespective of the result of the security level judgment.
    
  • Implementing an action by using the action command (cscaction)
    By issuing the action command (cscaction) from a management server, an administrator can implement an action according to the result of the latest security level judgment.
    For example, the administrator can use the functionality that allows the judgment of security levels and implementation of actions to be done separately to implement actions based on the result of security level judgment. The administrator can also implement actions again for specific clients.
    For details about the action command (cscaction), see cscaction (implements actions for a specified client) in 15. Commands.
    
  • Implementing an action by using the network control command
    By issuing the network control command (cscnetctrl) from a remote management server, an administrator can permit or immediately deny client connections to the network. For example, if the remote management server detects that the client is infected with a virus, the administrator can, from the remote system, immediately stop the client from accessing the network. Immediate denial by using the network control command (cscnetctrl) takes precedence over any other action.
    For details about the network control command, see cscnetctrl (controls network connections) in 15. Commands.
    

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated