Once you have secured the legitimate tool, here is the standard configuration for maximum protection: