1.6.2 General procedure for disabling network access for devices that have been infected with viruses
When a virus is detected in a computer accessing the network within your organization, you must immediately disable network access for that computer to prevent the virus from spreading to other computers.
By using the network monitoring function, you can disable or enable network access for devices any time. This function is useful when you want to temporarily disable network access for virus-infected computers, take proper anti-virus measures, and then enable network access for these computers again.
To control network access for a virus-infected computer:
- 1. Disable network access for a virus-infected computer.
-
When a virus is detected in a computer, disable network access for that computer, and then take measures to prevent the virus from spreading to other computers.
- 2. Enable network access for the computer after taking proper anti-virus measures.
-
After taking proper anti-virus measures, enable network access for the computer.
The computer for which proper anti-virus measures have been taken can access the network again.
- Tip
-
For security protection, even when network access is disabled for a computer, you can allow that computer to access certain servers by settings.
Related Topics:
- Organization of this subsection
(1) General procedure for disabling network access for virus-infected devices
When a virus is detected in a computer used within your organization, you need to disable network access for that computer, and then take measures to prevent the virus from spreading to other computers.
- 1. Receive notification from a user that the user's computer has been infected with a virus.
-
Receive notification from a user that the user's computer has been infected with a virus. Confirm that the user has removed the LAN cable from the user's computer, and that the virus infecting the user's computer has been quarantined and deleted by the anti-virus product.
- 2. Disable network access for the computer.
-
Disable network access for the computer and do not enable it until you verify that proper anti-virus measures have been taken.
In the Device Inventory view of the Inventory module, select the virus-infected computer. From Action, select Deny Network Access.
- Tip
-
By using filtering conditions such as Operating System, User Name, Department, and Location, you can find a computer of interest more quickly.
- 3. Check the anti-virus status.
-
Although you have already confirmed that the virus has been quarantined and deleted, you have to check for the presence of suspicious software that can cause virus infection, and make sure that the anti-virus status of the computer has been updated.
Anti-virus measures for the computer are complete.
Related Topics:
(2) General procedure for enabling network access for a device after taking proper anti-virus measures
After making sure that proper anti-virus measures have been taken for the virus-infected device, enable network access for the device.
- 1. Enable network access for the computer.
-
After making sure that proper anti-virus measures have been taken, allow network access for the computer. To enable network access for the currently disabled device, select the device in the Device Inventory view of the Inventory module, and from Action, select Allow Network Access.
- 2. Inform the user that the user's computer is allowed network access.
-
Inform the user that the user's computer is allowed network access.
When the user reconnects the LAN cable to the computer, the computer is allowed network access, and the user can resume operations.
The computer from which the virus has been deleted can access the network again.