LANProtect provides two types of security.  First, the four scans can be configured to offer different levels of protection against viruses.  Second, LANProtect password protection ensures that unauthorized personnel will not tamper with the scans.
The way you use and configure LANProtect determines the system’s level of protection against viruses.

LANProtect defaults to the highest level of security.  The following configurations are the defaults for maximum security: 
•	Scan all DOS and Macintosh files on the Prescheduled and Manual Server scans
•	Scan both incoming and outgoing files on the server with the Real Time scan
•	Move infected files to the specified or default virus directory
•	Generate and save a report to a text file upon scan completion
•	Notify more than one person when a virus is detected
•	Require passwords known only by a select few to unload and unlock the LANProtect menu screen
•	Notify users when they access an infected file

This level of security relates to a more relaxed virus detection and remedial environment.  The following is a list of the configurations and options selected for moderate security:
•	Scan selected files intermittently with the Manual Server and Prescheduled Server scans
•	Scan only incoming files with the Real Time scan
•	Rename infected files
•	Generate a report and send it to the printer
•	Notify only the system administrator when a virus is found

Password protection for unloading LANProtect and limiting access to all the menus in LANProtect is built in.  In addition, you may optionally lock the NLM screen when you walk away from the console.  
To unload the LANProtect NLM for maximum security:
1.	Press <Esc> from the LANProtect Options menu.
A dialog box appears.

2.	Select Yes to unload the LANProtect NLM.
A dialog box appears.

3.	Enter the LANProtect Unload password.  The default password is LANPROTECT.
The LANProtect NLM is unloaded.  If you configure it to load with immediate password protection, only those who know the unlock password will be able to access LANProtect.
In the Security menu the following options are available:
•	Lock LANProtect Menu
•	Modify Screen Unlock Password
•	Modify Unload Password

To ensure maximum security, default passwords should be changed once the scans are configured and running.  Default passwords for the LANProtect NLM are the same:  LANPROTECT.

The “Lock LANProtect Menu” option allows the supervisor to restrict access to the LANProtect NLM screen.  When the menus are locked, the only screens that are accessible without the password are the help screens (accessed by pressing <F1>) and the Monitor screen (accessed by pressing <F8>).  
To lock the LANProtect menu:
1.	Select Security | Lock LANProtect Menu.
A dialog box appears.  All LANProtect menus are inaccessible until the correct password is entered.

The only screens available to someone without the required password are the help and Monitor screens.  The help screens are accessed by pressing <F1>, and the Monitor screen is accessed by pressing <F8>.

LANProtect can be loaded with an optional command line switch, PROTECT, so it will immediately lock and require a password to access the LANProtect menu screen .  This option is useful when there is a power outage or when you load LANProtect from the AUTOEXEC.NCF.
To load LANProtect with immediate password protection:
1.	Type the following at the console prompt or in the AUTOEXEC.NCF file:
LOAD LPROTECT PROTECT
2.	Press <Enter>.

The “Modify Screen Unlock Password” option allows the network administrator to change the password used to unlock the LANProtect menu.  
To modify the screen unlock password:
1.	Select Security | Modify Screen Unlock Password.
You are prompted for the current password.

Note:	The default password is LANPROTECT.  The password is not case sensitive.
2.	Type in the current password and press <Enter>.
If you typed in the current password correctly, you are prompted for the new password.

3.	Type in the new password.
You are prompted to verify the password.

4.	Retype the new password for verification.
The password for unlocking the screen is now changed and you are returned to the Security menu.

Once the LANProtect NLM is loaded it cannot be unloaded without a password.  When you try to unload LANProtect from the LANProtect main menu, you are prompted for a password.  If you try to unload LANProtect from the file server console prompt, a message will appear telling you the NLM is not loaded.
To change the unload password:
1.	Select Security | Modify Unload Password.
You are prompted for the current password.

Note:	The default password is LANPROTECT.  The password is not case sensitive.
2.	Type the current password and press <Enter>.
If you typed the current password correctly, you are prompted for the new password.

3.	Type in the new password.
You are prompted to verify the password.
4.	Retype the new password for verification.
The unload password is now changed and you are returned to the Security menu.
If you have forgotten any of your passwords, you must contact Intel’s technical support.