The xAgent compares the digital signature of the SIP provider to your configured SIP value and generates an alert if they do not match. The "Verify SIP Provider" setting is enabled by default. When verification is enabled, a TAMPER_PROTECTION alert, as described in Wintrust Alerts , will be generated on your Endpoint Security (HX) Server if the detected SIP digital signatures do not match your configured SIP value.
To change the Verify SIP Provider setting on your host endpoints:
Important
The following configuration only applies to Windows xAgent versions 35.31.0 and above.
Log in to the Web UI as an administrator.
From the Admin menu, select Policies to access the Policies page.
From the Policies table, click the Agent Default Policy link to go to the Edit Policy page.
Select the Tamper Protection tab.
Toggle the ON/OFF switch next to Verify SIP Provider.
Click Save to save the policy settings.