Check: DTAM010
McAfee VirusScan Managed Client:
DTAM010
(in version v4 r10)
Title
The McAfee VirusScan limit log size parameter is not configured as required. (Cat II impact)
Discussion
This parameter controls the log size.
Check Content
From the ePO server console, select Systems tab, select the asset to be checked, select the Policies tab, select from the product pull down list VirusScan Enterprise 8.7.0. Locate in the Category column the On-Access General Policies. Select from the Policy column the policy associated with the On-Access General Policies. Under the Reports tab, locate the "Log file size" label. Criteria: If the "Limit the size of the file" option is not selected, this is not a finding. Criteria: If the "Limit the size of the file" option is selected and the “Maximum log file size:” is at least 100MB, this is not a finding.
Fix Text
From the ePO server console, select Systems tab, select the asset to be checked, select the Policies tab, select from the product pull down list VirusScan Enterprise 8.7.0. Locate in the Category column the On-Access General Policies. Select from the Policy column the policy associated with the On-Access General Policies. Under the Reports tab, locate the "Log file size:" label. IF the "Limit the size of the file" option is not to be used, ensure "Limit the size of the file" is not selected. If the "Limit the size of the file" option is selected, ensure the “Maximum log file size:” is at least 100MB.
Additional Identifiers
Rule ID:
Vulnerability ID: V-6475
Group Title:
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001242 |
The organization configures malicious code protection mechanisms to perform real-time scans of files from external sources at endpoints as the files are downloaded, opened, or executed in accordance with organizational security policy. |
Controls
| Number | Title |
|---|---|
| SI-3 |
Malicious Code Protection |