Configuring Additional Security Agent Services

Procedure

1. Go to Agents → Agent Management.
2. In the agent tree, click the root domain icon () to include all agents or select specific domains or agents.
3. Click Settings → Additional Service Settings.
4. Select to enable the required service on Windows desktops or Windows Server platforms in the following sections:
   • Unauthorized Change Prevention Service
     For Windows Server platforms, select the level of protection to enable.
     • Full mode: Enables all services and provides full access to all features
     • Performance mode: Enables a lightweight version of the service that only allows the following features to be enabled and ignores all other settings available in Full mode:
       • Behavior Monitoring → Enable Malware Behavior Blocking → Protect documents against unauthorized encryption or modification

         Important Performance mode does not automatically enable any settings. After enabling a specific feature, the Unauthorized Change Prevention Service only enables the supported feature and ignores all unsupported settings.

   • Firewall Service

     Important Enabling or disabling the service temporarily disconnects endpoints from the network. Ensure that you change the settings only during non-critical hours to minimize connection disruptions.

   • Suspicious Connection Service
   • Data Protection Service

     Important Enabling or disabling the service temporarily disconnects endpoints from the network. Ensure that you change the settings only during non-critical hours to minimize connection disruptions.

   • Advanced Protection Service
5. If you selected domain(s) or agent(s) in the agent tree, click Save. If you clicked the root domain icon, choose from the following options:
   • Apply to All Agents: Applies settings to all existing agents and to any new agent added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.
   • Apply to Future Domains Only: Applies settings only to agents added to future domains. This option will not apply settings to new agents added to an existing domain.