Reference Guide

Security Management Server v10.2.7 AdminHelp
203
Medium
1) Execution Control blocked a process from starting
because it was detected as a threat.
2) A threat is detected that has an associated mitigation
(for example, the threat
was manually quarantined), so the
process has been terminated.
3) A process was blocked or terminated due to a memory
violation.
4) A memory violation was detected and no automatic
mitigation policy is in effect for that violation type.
Low
1) A file that was identified as a threat has been added to
the Global Safe List or deleted from the file system.
2) A threat has been detected and automatically
quarantined.
3) A file has been identified as a threat, but waived on the
computer.
4) The status of a curren
t threat has changed (for example,
Threat > Quarantined, Quarantined > Waived, or Waived >
Quarantined).
Log Files Location <SYSTEM_DRIVE>:\ProgramData\DDP\Suite\Logs
String - File path
Specifies the location for the log files.
The default location is
<SYSTEM_DRIVE>:\ProgramData\DDP\Suite\Logs.
Enable Activity Logging Selected
Selected
Not Selected
This policy is the "master policy" for all other Threat
Protection logging policies. If this policy is Not Selected, no
Threat Protection logging takes place, regardless of other
policy values.
A Selected value enables Threat Protection logging.
Debug Logging for Web Protection Not Selected
Selected
Not Selected
A Selected value enables verbose logging of Web
Protection activity.
Debug Logging for Client Firewall
Not Selected
Selected
Not Selected
A Selected value enables verbose logging of Firewall
activity.
Advanced Threat Prevention
Threat Prevention policies are available at the Enterprise, Endpoint Group, and Endpoint levels.
Policy descriptions also display in tooltips in the Management Console. In this table, master policies are
in bold font.
Policy Default Setting Description
Advanced Threat Prevention
This technology is powered by Cylance and protects your operating system by detecting and preventing
malware pre-execution. Advanced Threat Prevention uses artificial intelligence and predictive
mathematical models to quickly and accurately identify what is safe and what is a threat.