User manual SYMANTEC ALTIRIS REAL-TIME SYSTEM MANAGER 7.0 SP2 V1.0

[. . . ] AltirisTM Real-Time System Manager from Symantec User Guide Version 7. 0 SP2 MR1 AltirisTM Real-Time System Manager from Symantec User Guide The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Documentation version 7. 0 SP2 MR1 Legal Notice Copyright © 2010 Symantec Corporation. Symantec, the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the product are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U. S. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. [. . . ] To start the computer from an image, click Browse to navigate to a network share where the image is located. Warning: Do not use an image file that is placed on a CD or a DVD-ROM to start the computer. Use only the images that are stored on local or network hard disk drives. 6 Turn on or restart the computer. See "Turning off, turning on, or restarting a computer" on page 33. Using Real-Time System Manager Running real-time one-to-one tasks 37 To view details of active IDE-R session 1 2 3 On the Manage Power State and Redirection page, click Details to open the Redirection Details dialog box. Click Close. Filtering network traffic (Intel AMT only) The network filtering (Circuit Breaker) functionality on Intel AMT lets you block network traffic from and to the target computer's operating system. For example, you can use this feature to isolate an infected computer from the network. Note: Network filtering works only if both client operating system and Intel AMT network settings are configured to use Dynamic Host Configuration Protocol (DHCP). See "About network filtering ports and settings" on page 72. You can also run this task on multiple computers, immediately or on a schedule. See "Filtering network traffic on multiple computers " on page 42. To block all incoming and all outgoing traffic from the target computer's operating system 1 Open the Real-Time view for the computer you want to manage. See "Accessing the Real-Time view" on page 32. 2 3 4 Click Real-Time System Manager > Networking > Intel AMT Network Filtering. Click Filter network traffic other than to and from the Notification Server. If you want to prevent the target computer from sending malicious packets, check Enable anti-spoofing filter. This feature forces the identity verification of outgoing network traffic and drops packets if the computer is suspected of originating malicious attacks that are known as IP spoofing. 5 Click Save changes. 38 Using Real-Time System Manager Running real-time one-to-one tasks To protect the target computer from network flooding 1 Open the Real-Time view for the computer you want to manage. See "Accessing the Real-Time view" on page 32. 2 3 Click Real-Time System Manager > Networking > Intel AMT Network Filtering. Click Limit the number of PING packets to and type the number of packets per second allowed to pass through the Intel vPro network filter. Default: 10 packets per second. 4 Click Save changes. Configuring alerts (Intel AMT, ASF, DASH) You can specify the custom destination for SNMP alerts (PET). For a computer with Intel AMT, you can specify which alerts to log and send. You cannot directly disable ASF alerts using Real-Time System Manager. However, you can modify the SNMP server and SNMP community settings appropriately specifying a non-existent destination for ASF alerts. To change the PET destination 1 Open the Real-Time view for the computer you want to manage. [. . . ] Despite the power state or the operating system state of the client computer, Intel AMT provides IT administrators with access to alerts, hardware inventory, power management, circuit breaker, and agent presence functionality. Intel AMT functionality requires the computer to be plugged into the power source and connected to the network. Intel AMT functionality does not require a software agent to be installed on the client computer. The Symantec Management Platform service that communicates with the Altiris Agent and the CMDB to provide management, security, and administrative functionality. [. . . ]