Sophos Enterprise Console
9 Setting up security policies
A security policy is a collection of settings that can be applied to the computers in a group or groups.
Enterprise Console applies default policies to your computer groups. This section explains:
• What the default policies are and whether you need to change them.
• How to create or edit a policy.
• How to apply a policy to your computer groups.
9.1 Default policies
applies “default” security policies to your computer groups. You do not have to change these policies unless you want to, with these exceptions:
• You must set up a firewall policy now.
• You must edit the application control, data control, device control, tamper protection, patch, exploit prevention or web control policies if you want to use these features. You can do this any time.
For recommended policy settings, see the Sophos Enterprise Console .
9.2 Set up a firewall policy
Note
During the installation of firewall, there will be a temporary disconnection of network adapters. The interruption may cause the disconnection of networked applications, such as Remote Desktop.
By default, the firewall blocks all non-essential connections. Therefore you must configure the firewall before you protect your computers.
1. In the Policies pane, right-click Firewall, and click Create Policy.
A New Policy is added to the list, with its name highlighted. Type the name that you want to use for the policy.
2. Double-click the policy to edit it.
A wizard is launched.
3. In the Firewall Policy Wizard we recommend that you make the following selections.
a) On the Configure firewall page, select Single location unless you want the firewall to use different settings according to the location where you use it.
b) On the Operational Mode page, select Block inbound and allow outbound traffic.
c) On the File and print sharing page, select Allow file and print sharing.
9.3 Create or edit a policy
1. In , if the Policies pane (bottom left-hand side of the window) is not displayed, on the View menu, click Endpoints.
Copyright © Sophos Limited 29
Sophos Enterprise Console
2. In the Policies pane, do one of the following:
• To create a new policy, right-click the type of policy that you want to create, for example
Updating, and click Create Policy.
• To edit a default policy, double-click the type of policy that you want to edit. Then select
Default.
If you created a policy, a New Policy is added to the list, with its name highlighted. Type the name that you want to use for the policy.
3. Double-click the policy. Enter the settings that you want.
If you created a policy, you need to apply your policy to a computer group.
9.4 Apply a policy to a group
• In the Policies pane, drag the policy to the group to which you want to apply the policy.
Note
Alternatively, you can right-click a group and select View/Edit Group Policy Details. You can then select policies for that group from drop-down menus.
30 Copyright © Sophos Limited
