McAfee QUICKCLEAN 3.0 Technical Information Page 118

  • Download
  • Add to my manuals
  • Print
  • Page
    / 212
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 117
Comodo Endpoint Security Manager - SME - Administrator Guide
Image Execution Control is an integral part of the Defense+ engine. If the Defense+ Security Level is set to 'Training Mode' or
'Clean PC Mode', then it is responsible for authenticating every executable image that is loaded into the memory.
Comodo Internet Security calculates the hash of an executable at the point it attempts to load into memory. It then compares this
hash with the list of known / recognized applications that are on the Comodo safe list. If the hash matches the one on record for
the executable, then the application is safe. If no matching hash is found on the safelist, then the executable is 'unrecognized'
and you receive an alert.
This area allows you to quickly determine how proactive the monitor should be and which types of files it should check.
Background note: In this context, an 'image' means an 'Executable Image'. An executable image is a variation on file
compression, such as ZIP or RAR files. For example, most program installers are contained in executable images.
Image Execution Control Level Slider
The control slider in the settings screen allows you to switch the Image Execution settings between Enabled and Disabled
states. The Image Execution Control is disabled irrespective of the settings in this slider, if Defense+ is permanently deactivated
in the General Settings from the Defense+ Settings interface of CIS in the endpoints.
Enabled - This setting instructs Defense+ to intercept all the files before they are loaded into memory and also
Intercepts prefetching/caching attempts for the executable files.
Disabled - No execution control is applied to the executable files.
Check Box Options
Treat unrecognized files as - This has five options and the unrecognized files will be run as per the option selected.
Endpoint Security Manager - SME Administrator Guide | © 2013 Comodo Security Solutions Inc. | All rights reserved 118
Page view 117
1 2 ... 113 114 115 116 117 118 119 120 121 122 123 ... 211 212

Comments to this Manuals

No comments