Detections
Analytics

DTAM102 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to scan when reading from disk.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Antivirus software is the most commonly used technical control for malware threat mitigation. Real-time scanning of files as they are read from disk is a crucial first line of defense from malware attacks.

Solution

Access the local VirusScan console by clicking Start->All Programs->McAfee->VirusScan Console.
 On the menu bar, click Task->On-Access Scanner Properties.
 Select All Processes.

 Under the Scan Items tab, locate the 'Scan files:' label. Select the 'When reading from disk' option.

 Click OK to Save.

See Also

https://iasecontent.disa.mil/stigs/zip/U_McAfee_VirusScan88_Local_Client_V5R15_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-3, CAT|II, CCI|CCI-001242, Rule-ID|SV-56429r1_rule, STIG-ID|DTAM102, Vuln-ID|V-14624

Plugin: Windows

Control ID: 3da2eea93acfbccab5f7070eb826b240f14252ed8742299c6ee46cc0d1443288