Your malware protection policies control which malware protection processes run on your host endpoints. The xAgent default policy defines the malware protection default settings and exclusions that apply to all of your host endpoints. You can create a custom policy to manage malware protection exclusions for select host sets in your environment, including the following:
Include or exclude network files from malware scanning.
Include or exclude specific host sets from malware scanning.
Include or exclude specific host sets from MalwareGuard.
Include or exclude specific host sets from file quarantine.
Include or exclude quarantined files from specific remediation actions, including file cleaning, trace removal, and notification alerts.
Include or exclude specific processes, files and folders, and MD5 hashes from real-time malware scanning.
The following table summarizes the malware protection policy settings.
Policy Setting | Description | Reference |
|---|---|---|
Malware Detection | Enable and disable Signature and Heuristic Detection for all of your host endpoints or select host sets in your environment. | |
Cloud Lookup | If Malware Detection is enabled, you can enable or disable cloud lookup for Windows hosts. | |
MalwareGuard | Enable and disable | |
Malware Detection Options | Enable and disable on-access malware scans of network files on all of your host endpoints or select host sets in your environment. | |
Malware Definitions Updates | Define the download source and the update frequency for malware definition updates received by all of your host endpoints or select host sets in your environment. | See Configuring the Update Interval for Malware Protection Indicators and Configuring the Malware Protection Indicator Download Channel. |
Quarantine | Enable and disable file quarantine and remediation for all of your host endpoints or select host sets in your environment. | |
Remediation Actions | Enable and disable file remediation actions for all of your host endpoints or select host sets in your environment. | |
Remediation Actions for MalwareGuard | Enable and disable file remediation actions for MalwareGuard processing for all of your host endpoints or select host sets in your environment. | |
Policy Exclusions | Exclude specific processes from malware protection processing, including malware detection, quarantine, and remediation, for all hosts in the enterprise. | |
Exclude specific files and folders from malware protection processing, including malware detection, quarantine, and remediation, for all hosts in the enterprise. | ||
Exclude specific MD5 hashes from malware protection processing, including malware detection, quarantine, and remediation, for all hosts in the enterprise. | ||
NoteExcluding host sets, processes, files and folders, or MD5 hashes from malware protection processing is not recommended because it restricts the items that malware protection scans. | ||
See Reviewing Malware Protection Policy Settings to review the current settings.