Workload Security can run recommendation scans on computers to help identify which rules you should apply or remove for Intrusion Prevention, Integrity Monitoring, and Log Inspection. The resulting recommendations are a good place to start when establishing security rules. However, you may need to implement additional rules for common vulnerabilities.
  • Agents that support the enhanced recommendation scan display enhanced recommendation scan indicator next to Agent on the Overview page.
  • The enhanced recommendation scan has the following requirements:
    • Agent version 20.0.1-12510 or later (See Supported features by platform.)
    • Activity Monitoring enabled
    • Internet of Things (IoT) traffic to Amazon Web Services (AWS) permitted through firewalls
  • Agents that do not meet the requirements for the enhanced recommendation scan automatically use the classic recommendation scan instead.
Related information