Configuring Behavior Monitoring Settings Parent topic

OfficeScan agents constantly monitor endpoints for unusual modifications to the operating system or on installed software. Administrators (or users) can create exception lists that allow certain programs to start while violating a monitored change, or completely block certain programs. In addition, programs with a valid digital signature are always allowed to start.
Note
Note
Administrators may deny access to this feature.

Procedure

  1. Click the Settings button (icon_settings.jpg) on the main console.
  2. On the Protection tab, select Behavior Monitoring from the drop-down menu.
  3. Select Enable Behavior Monitoring.
  4. Configure the exception list by browsing to the location of a program, clicking Add, and then choosing to approve or block the program. Repeat this step until all the programs have been added. Approved programs can be started even if they violate a monitored change, while blocked programs can never be started.
  5. Click OK.