Configuring Additional Security Agent Services

Important:

Enabling additional services on Windows Server platforms may affect server performance. After enabling a service on a Windows Server platform, Trend Micro recommends that you monitor the server for some time to ensure that no performance impact occurred.

  1. Go to Agents > Agent Management.
  2. In the agent tree, click the root domain icon () to include all agents or select specific domains or agents.
  3. Click Settings > Additional Service Settings.
  4. Select to enable the required service on Windows desktops or Windows Server platforms in the following sections:
    • Unauthorized Change Prevention Service

      • For Windows Server platforms, select Only enable services required by Security Agent Self-protection features to ensure that the Security Agent program stays protected without affecting server performance.

        Important:

        Selecting Only enable services required by Security Agent Self-protection features ensures that the service related to Behavior Monitoring, Device Control, Predictive Machine Learning (process detections), and the Certified Safe Software Service do not run. If you want to use any of the scanning features, do not enable this feature.

    • Firewall Service

      Important:

      Enabling or disabling the service temporarily disconnects endpoints from the network. Ensure that you change the settings only during non-critical hours to minimize connection disruptions.

    • Suspicious Connection Service

    • Data Protection Service

      Important:

      Enabling or disabling the service temporarily disconnects endpoints from the network. Ensure that you change the settings only during non-critical hours to minimize connection disruptions.

    • Advanced Protection Service

  5. If you selected domain(s) or agent(s) in the agent tree, click Save. If you clicked the root domain icon, choose from the following options:
    • Apply to All Agents: Applies settings to all existing agents and to any new agent added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.

    • Apply to Future Domains Only: Applies settings only to agents added to future domains. This option will not apply settings to new agents added to an existing domain.