Detections
Analytics

DTAM161 - McAfee VirusScan Access Protection Properties must be configured to enable access protection.

Information

Access Protection prevents unwanted changes to a computer by restricting access to specified ports, files and folders, shares, and registry keys and values. It prevents users from stopping McAfee processes and services, which are critical before and during outbreaks. Access Protection for VSE uses predefined and user-defined rules to strengthen systems against virus attacks. For instance, rules are used to specify which items can and cannot be accessed. Each rule can be configured to block and/or report access violations when they occur, and rules can also be disabled.

Solution

Access the local VirusScan console by clicking Start->All Programs->McAfee->VirusScan Console.
Under the Task column, select Access Protection, right-click, and select Properties.

Under the Access Protection tab, select the 'Enable Access Protection' option.

Click OK to save.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_McAfee_VirusScan88_Local_Client_V6R1_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-3c.2., CAT|II, CCI|CCI-001243, Rule-ID|SV-243434r722641_rule, STIG-ID|DTAM161, STIG-Legacy|SV-73795, STIG-Legacy|V-59365, Vuln-ID|V-243434

Plugin: Windows

Control ID: 64d5ce440102e5930fa0ceea1fbb4b3e318dfb3c32951ccc2896122a5d940522