To enable TCP Port Scanning in a particular scanning profile:

1. From the Network & Security Audit Options tab, click TCP Ports sub–tab.

2. Select the scanning profile that you wish to customize from the left pane under Profiles.

3. Select Enable TCP Port Scanning option.

To configure which TCP ports will be processed by a scanning profile:

1. From Network & Security Audit Options tab, click TCP Ports sub–tab.

2. Select scanning profile to customize from the left pane under Profiles.

3. Select TCP ports to analyze with this scanning profile.

To enable network device (including USB device) scanning in a particular scanning profile:

1. From the Network & Security Audit Options tab, click Devices sub–tab.

2. Click Network Devices tab.

3. Select the scanning profile to customize from the left pane under Profiles.

4. From the right pane, select Enable scanning for hardware devices on target computer(s).

To compile a network device blacklist/white–list for a scanning profile:

1. From the Network & Security Audit Options tab, click Devices sub–tab.

2. Click Network Devices tab.

3. Select the scanning profile to customize from the left pane under Profiles.

4. In the right pane: to create a network device blacklist, specify which devices you want to classify as high security vulnerabilities in the space provided under Create a high security vulnerability for network devices which name contains.

For example, if you enter the word ‘wireless’ you will be notified through a high security vulnerability alert when a device whose name contains the word ‘wireless’ is detected. To create a network device white–list, specify which devices you want to ignore during network vulnerability scanning in the space provided under Ignore (Do not list/save to db) devices which name contains.

From the Network Devices tab, you can also specify the type of network devices checked by this scanning profile and reported in the scan results. These include ‘wired network devices’, ‘wireless network devices’, ‘software enumerated network devices’ and ‘virtual network devices’. To specify which network devices to enumerate in the scan results:

1. From the Network & Security Audit Options tab, click Devices sub–tab.

2. Click on the Network Devices tab (opens by default).

3. Select the scanning profile that you wish to customize from the left pane under Profiles.

4. Click Advanced at the bottom of the page.

5. Set the required options to Yes. Click OK to finalize your settings.

By default,GFI LanGuard also supports integration with particular security applications. These include various antivirus and antispyware software.

During security scanning, GFI LanGuard checks the correct configuration of virus scanner(s) or antispyware software and that the respective definition files are up to date.

Application scanning is configurable on a scan profile by scan profile basis and all the configuration options are accessible through the two sub–tabs contained in the Applications tab. These are the Unauthorized Applications sub–tab and the Advanced Options sub–tab.

To enable installed applications scanning in a particular scanning profile:

1. From the Network & Security Audit Options tab, click on the Applications sub–tab.

2. Click on the Unauthorized Applications sub–tab.

3. Select the scanning profile that you wish to customize from the left pane under Profiles.

4. Select the Enable scanning for installed applications on target computer(s) checkbox.

To compile installed applications blacklist/white–list:

1. From the Network & Security Audit Options tab, click Applications sub–tab.

2. Select Unauthorized Applications sub–tab.

3. Select the scanning profile to customize from the left pane under Profiles.

4. From the right pane, select Enable scanning for installed applications on target computer(s) checkbox.

5. Specify the applications that are authorized for installation. Select from:

• Only the applications in the list below - Specify names of applications that are authorized for installation. These applications will be ignored during a security scan
• All applications except the ones in the list below - Specify the names of the applications that are unauthorized for installation. Applications not in this list will be ignored during a security scan.

6. In the Ignore (Do not list/save to db) applications from the list below options key in applications by clicking Add. Any application listed is white–listed.

GFI LanGuard ships with a default list of antivirus and antispyware applications that can be checked during security scanning.

The Advanced Options tab enables you to configure when GFI LanGuard will generate high security vulnerability alerts if it detects certain configurations of a security application.

Alerts are generated when:

• No antivirus, antispyware or firewall is detected
• A fake antivirus or antispyware is detected
• AntivirusA software countermeasure that detects malware installed on a computer without the user's knowledge. or antispyware definitions are not up to date
• Antivirus or antispyware real–time monitoring is turned off
• Antivirus or antispyware product is expired
• Antivirus or antispyware product detects malware on the scanned computer(s)
• Firewall is disabled
• HTTP/FTPA protocol used to transfer files between network computers. timeout when checking for product updates on remote sites. This option generates an alert if the number of seconds defined for timeout is exceeded.