Configuring Additional Security Agent Services

Views:

Important:

Enabling additional services on Windows Server platforms may affect server performance. After enabling a service on a Windows Server platform, Trend Micro recommends that you monitor the server for some time to ensure that no performance impact occurred.

Go to Agents > Agent Management.
In the agent tree, click the root domain icon () to include all agents or select specific domains or agents.
Click Settings > Additional Service Settings.
Select to enable the required service on Windows desktops or Windows Server platforms in the following sections:
- Unauthorized Change Prevention Service
  
  For Windows Server platforms, select the level of protection to enable.
  - Full mode: Enables all services and provides full access to all features
  - Performance mode: Enables a lightweight version of the service that only allows the following features to be enabled and ignores all other settings available in Full mode:
    - Behavior Monitoring > Enable Malware Behavior Blocking > Protect documents against unauthorized encryption or modification
      
      Important:
      Performance mode does not automatically enable any settings. After enabling a specific feature, the Unauthorized Change Prevention Service only enables the supported feature and ignores all unsupported settings.
- Firewall Service
  
  Important:
  Enabling or disabling the service temporarily disconnects endpoints from the network. Ensure that you change the settings only during non-critical hours to minimize connection disruptions.
- Suspicious Connection Service
- Data Protection Service
  
  Important:
  Enabling or disabling the service temporarily disconnects endpoints from the network. Ensure that you change the settings only during non-critical hours to minimize connection disruptions.
- Advanced Protection Service
If you selected domain(s) or agent(s) in the agent tree, click Save. If you clicked the root domain icon, choose from the following options:
- Apply to All Agents: Applies settings to all existing agents and to any new agent added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.
- Apply to Future Domains Only: Applies settings only to agents added to future domains. This option will not apply settings to new agents added to an existing domain.