Check: DTAM035
McAfee VirusScan Managed Client:
DTAM035
(in version v4 r10)
Title
The McAfee VirusScan log to file email parameter is not configured as required. (Cat II impact)
Discussion
This parameter ensures that virus scanning sessions for email are logged.
Check Content
From the ePO server console, select Systems tab, select the asset to be checked, select the Policies tab, select from the product pull down list VirusScan Enterprise 8.7.0. Locate in the Category column the On Delivery Email Scan Policies. Select from the Policy column the policy associated with the On Delivery Email Scan Policies. Under the Reports tab, locate the "Log to file:" section and ensure that "Enable activity logging and accept the default location for the log file or specify a new location." is selected. Criteria: If the option "Enable activity logging and accept the default location for the log file or specify a new location." is selected, this is not a finding.
Fix Text
From the ePO server console, select Systems tab, select the asset to be checked, select the Policies tab, select from the product pull down list VirusScan Enterprise 8.7.0. Locate in the Category column the On Delivery Email Scan Policies. Select from the Policy column the policy associated with the On Delivery Email Scan Policies. Under the Reports tab, locate the "Log to file:" section and select "Enable activity logging and accept the default location for the log file or specify a new location." Select Save.
Additional Identifiers
Rule ID:
Vulnerability ID: V-6596
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001668 |
The organization employs malicious code protection mechanisms at workstations, servers, or mobile computing devices on the network to detect and eradicate malicious code transported by electronic mail, electronic mail attachments, web accesses, removable media, or other common means or inserted through the exploitation of information system vulnerabilities. |
Controls
Number | Title |
---|---|
No controls are assigned to this check |