OfficeScan, ServerProtect, PC-cillin, InterScan, and ...

1 Trend Micro Incorporated reserves the right to make changes to this document and tothe product described herein without notice. Before installing and using the product,review the readme files, release notes, and/or the latest version of the applicabledocumentation, which are available from the Trend Micro website at: Micro, the Trend Micro t-ball logo, TrendProtect, TrendSecure, Worry-Free,OfficeScan, ServerProtect, PC-cillin, InterScan, and ScanMail are trademarks orregistered trademarks of Trend Micro Incorporated. All other product or companynames may be trademarks or registered trademarks of their 2018. Trend Micro Incorporated. All rights Part No.: WFEM108151/180129 Release Date: March 2018 Protected by Patent No.: 5,951,698 and 7,188,369 This documentation introduces the main features of the product and/or providesinstallation instructions for a production environment.

2 Read through the documentationbefore installing or using the information about how to use specific features within the product may beavailable at the Trend Micro Online Help Center and/or the Trend Micro Micro always seeks to improve its documentation. If you have questions,comments, or suggestions about this or any Trend Micro document, please contact us this documentation on the following site: iTable of ContentsPrefacePreface .. xiWorry-Free Business Security Documentation .. xiiAudience .. xiiDocument Conventions .. xiiiChapter 1: Introducing Worry-Free Business SecurityStandard and AdvancedOverview of Trend Micro Worry-Free Business Security .. 1-2 New in this Release .. 1-2 Key Features and Benefits .. 1-4 Trend Micro Smart Protection Network.

3 1-4 File Reputation Services .. 1-5 Web Reputation Services .. 1-5 Email Reputation (Advanced only) .. 1-5 Smart Feedback .. 1-6 URL Filtering .. 1-7 Benefits of Protection .. 1-8 Understanding Threats .. 1-8 Viruses and Malware .. 1-9 Spyware and Grayware .. 1-10 Spam .. 1-11 Intrusions .. 1-11 Malicious Behavior .. 1-12 Fake Access Points .. 1-12 Phishing Incidents .. 1-12 Mass Mailing Attacks .. 1-12 Web Threats .. 1-13 Worry-Free Business Security Administrator's Guide ii Chapter 2: Getting StartedThe Worry-Free Business Security Network .. 2-2 Security Server .. 2-2 Scan Server .. 2-2 Agents .. 2-3 Web Console .. 2-4 Opening the Web Console .. 2-5 Web Console Navigation .. 2-8 Web Console Icons .. 2-10 Chapter 3: Installing AgentsSecurity Agent Installation.

4 3-2 Security Agent Installation Requirements .. 3-2 Security Agent Installation Considerations .. 3-2 Available Security Agent Features .. 3-3 Security Agent Installation and IPv6 Support .. 3-5 Security Agent Installation Methods .. 3-7 Installing from the Internal Web Page .. 3-9 Installing with Login Script Setup .. 3-11 Installing with Client Packager .. 3-13 Installing with Remote Install .. 3-16 Installing with Vulnerability Scanner .. 3-19 Installing with Email Notification .. 3-30 Migrating to the Security Agent .. 3-31 Performing Post-installation Tasks on Security Agents .. 3-32 Messaging Security Agent Installation .. 3-34 Messaging Security Agent Installation Requirements .. 3-34 Installing the Messaging Security Agent (Advanced only).

5 3-34 Removing Agents .. 3-36 Removing Agents from the Web Console .. 3-37 Uninstalling Agents from the Web Console .. 3-38 Uninstalling the Security Agent from the Endpoint .. 3-39 Using the SA Uninstall Tool .. 3-39 Uninstalling the Messaging Security Agent from the MicrosoftExchange Server (Advanced Only) .. 3-41 Table of Contents iiiChapter 4: Managing DevicesUsing the Device Tree .. 4-2 Using the Device Commands .. 4-4 Adding Agents to Groups .. 4-6 Adding Groups .. 4-7 Customizing Device List Columns .. 4-8 Moving Agents .. 4-10 Moving Security Agents Between Groups .. 4-11 Moving Agents Between Security Servers Using the Web Console .. 4-12 Moving a Security Agent Between Security Servers Using ClientMover .. 4-13 Replicating Settings.

6 4-15 Replicating Security Agent Group Settings .. 4-15 Replicating Messaging Security Agent Settings (Advanced Only) 4-16 Importing and Exporting the Settings of Security Agent Groups .. 4-16 Exporting Settings .. 4-18 Importing Settings .. 4-18 Chapter 5: Managing Basic Security Settings for SecurityAgentsSummary of Basic Security Settings for Security Agents .. 5-2 Scan Methods .. 5-3 Configuring Scan Methods .. 5-5 Real-time Scan for Security Agents .. 5-7 Configuring Real-time Scan for Security Agents .. 5-7 Predictive Machine Learning .. 5-8 Configuring Predictive Machine Learning .. 5-9 Behavior Monitoring .. 5-10 Configuring Behavior Monitoring .. 5-11 Trusted Program .. 5-15 Configuring Trusted Program .. 5-15 Worry-Free Business Security Administrator's Guide iv Quarantine Directory.

7 5-16 Configuring the Quarantine Directory .. 5-19 Web Reputation .. 5-19 Configuring Web Reputation for Security Agents .. 5-21 URL Filtering .. 5-22 Configuring URL Filtering .. 5-22 Approved/Blocked URLs .. 5-23 Configuring Approved/Blocked URLs .. 5-23 Firewall .. 5-24 Configuring the Firewall .. 5-27 Working with Firewall Exceptions .. 5-28 Disabling the Firewall on a Group of Agents .. 5-31 Disabling the Firewall on All Agents .. 5-31 Device Control .. 5-32 Configuring Device Control .. 5-32 User Tools .. 5-34 Configuring User Tools .. 5-34 Agent Privileges .. 5-35 Configuring Agent Privileges .. 5-35 Chapter 6: Managing Basic Security Settings for MessagingSecurity Agents (Advanced Only)Messaging Security Agents .. 6-2 How the Messaging Security Agent Scans Email Messages.

8 6-3 Default Messaging Security Agent Settings .. 6-4 Real-Time Scan for Messaging Security Agents .. 6-5 Configuring Real-time Scan for Messaging Security Agents .. 6-5 Anti-Spam .. 6-6 Email Reputation .. 6-7 Content Scanning .. 6-9 Content Filtering .. 6-14 Managing Content Filtering Rules .. 6-15 Types of Content Filtering Rules .. 6-19 Table of Contents vAdding a Content Filtering Rule for All Matching Conditions .. 6-20 Adding a Content Filtering Rule for Any Matching Condition .. 6-23 Adding a Content Filtering Monitoring Rule .. 6-25 Creating Exceptions to Content Filtering Rules .. 6-28 Data Loss Prevention .. 6-29 Preparatory Work .. 6-30 Managing Data Loss Prevention Rules .. 6-30 Default Data Loss Prevention Rules.

9 6-38 Adding Data Loss Prevention Rules .. 6-39 Attachment Blocking .. 6-44 Configuring Attachment Blocking .. 6-44 Web Reputation .. 6-46 Configuring Web Reputation for Messaging Security Agents .. 6-48 Mobile Security .. 6-50 Mobile Security Support .. 6-50 Configuring Device Access Control .. 6-51 Cancelling a Pending Device Wipe .. 6-53 Manually Wiping Devices .. 6-53 Configuring Security Policies .. 6-54 Quarantine for Messaging Security Agents .. 6-59 Querying Quarantine Directories .. 6-60 Viewing Query Results and Taking Action .. 6-61 Maintaining Quarantine Directories .. 6-63 Configuring Quarantine Directories .. 6-64 Notification Settings for Messaging Security Agents .. 6-66 Configuring Notification Settings for Messaging Security Agents.

10 6-67 Configuring Spam Maintenance .. 6-68 Managing the End User Quarantine .. 6-69 Trend Micro Support/Debugger .. 6-71 Generating System Debugger Reports .. 6-71 Real-time Monitor .. 6-72 Working with Real-time Monitor .. 6-73 Adding a Disclaimer to Outbound Email Messages .. 6-73 Worry-Free Business Security Administrator's Guide vi Chapter 7: Managing ScansAbout Scans .. 7-2 Real-time Scan .. 7-2 Manual Scan .. 7-3 Running Manual Scans .. 7-3 Scheduled Scan .. 7-6 Configuring Scheduled Scans .. 7-6 Scan Targets and Actions for Security Agents .. 7-8 Scan Targets and Actions for Messaging Security Agents .. 7-15 Chapter 8: Managing UpdatesUpdate Overview .. 8-2 Updatable Components .. 8-3 Hot Fixes, Patches, and Service Packs.