Do Not show antivirus alerts should be changed to Action when a threat is detected just like CCAV.
Do Not show antivirus alerts: Quarnatine, etc
Alert is shown for its respective setting even though is says Do Not show antivirus alerts
2. What you wanted to happen or see:
Do Not show antivirus alerts should be changed to Action when a threat is detected: Block, Quarantine etc
Action when a threat is detected: Quarantine
Action when a threat is detected: Block
Action when a threat is detected: Ask User
3. Why you think it is desirable:
Do Not show antivirus alerts and the description isent correct for current CIS 8.2 (we want alert for respective setting)
HIPS and Firewall Do Not show popup alerts works since the setting is true to is name,
Do Not show popup alerts: the action is allowd/blocked silently
4. Any other information:
Do not show antivirus alerts - Allows you to configure whether or not to show antivirus alerts when malware is encountered. Choosing ‘Do not show antivirus alerts’ will minimize disturbances but at some loss of user awareness. If you choose not to show alerts then you have a choice of default responses that CIS should automatically take – either ‘Block Threats’ or ‘Quarantine Threats’. (Default = Enabled )
Quarantine Threats – Moves the detected threat(s) to quarantine for your later assessment and action. (Default)
Block Threats – Stops the application or file from execution, if a threat is detected in it.
VirusScope, Do not show popup alerts and File rating, Do not show popup alerts need also to be changed.
What the option do.
When [ ] Do Not show pupup alerts. is Disabled/unchecked it will ask you what you want to do.
When [X] Do Not show pupup alerts. is Enabled/checked it will quarantine the file and give you an alert.
When File Rating, [ ] Do not show popup alerts is disabled/unchecked it will ask you what you want to do, and you have the option to quarantine etc.
When File Rating, [X] Do not show popup alerts is eisabled/checked it block and termintate silently. (if i remeber correctly)
Dunno why it recommends you to quarantine the file when it ask and, to block if you dont want it to alerts you, shouldent it be Terminate and quarantine. instead of Block and Terminate
CIS is following a generic scheme, where it is simply letting you to make a decision whether to see alert or not and if you don’t want to see alert, it has a default option best selected depending on component in use.
So it is allowing you to select all probable options and at the same time keeping default selection easy in case user doesn’t want to see alert.
So there is some intelligence added in that approach and well though out.