Reference Guide

Manage Policies
218
Reputation Service
Sensitivity
Medium
Disable
Very Low
Low
Medium
High
Very High
When enabled, samples are submitted to the lab to determine if they are
malware. Sensitivity level configures the sensitivity level to use when
determining if a detected sample is malware.
The higher the sensitivity level, the higher the number of malware detections.
However, allowing more detections might result in more false positive results.
Risk levels:
Very low - The detections and risk of false positives are the same as with
regular content files. A detection is made available to Threat Protection when
the lab publishes it instead of waiting for the next file update. Use this setting
for desktops and servers with restricted user rights and a strong security
footprint. This setting results in an average of 10–15 queries per day, per
computer.
Low - This setting is the minimum recommendation for laptops or desktops
and servers with a strong security footprint. This setting results in an average
of 10–15 queries per day, per computer.
Medium - Use this level when the regular risk of exposure to malware is
greater than the risk of a false positive. The proprietary, heuristic checks result
in detections that are likely to be malware. However, some detections might
result in a false positive. With this setting, the lab checks that popular
applications and operating system files do not result in a false positive. This
setting is the minimum recommendation for laptops or desktops and servers.
This setting results in an average of 20–25 queries per day, per computer.
High - Use this setting for deployment to systems or areas which are regularly
infected. This setting results in an average of 20–25 queries per day, per
computer.
Very high - Dell recommends using this level only for scanning volumes and
directories that do not support executing programs or operating systems.
Detections found with this level are presumed malicious, but have not been
fully tested to determine if they are false positives. Use this setting for on-
demand scans on non-operating system volumes. This setting results in an
average of 20–25 queries per day, per computer.
On-Demand
Protection - Full
Scan
Selected
Selected
Not Selected
This policy is the "master policy" for all other On-
Demand Protection: Full Scan
policies. If this policy is Not Selected, no On-Demand Protection: Full Scan
policies are enforced, regardless of other policy values.
A Selected value means that On-Demand Protection: Full Scan is enabled.
This policy must be set to Selected to enable On-Demand Protection: Full Scan
settings. If this policy is Not Selected, no On-Demand Protection: Full Scan
policies are applied.
By default, every time Full Scan runs, it scans the following locations for
threats:
- the computer memory for installed rootkits, hidden processes, and other
behavior that suggests malware is attempting to hide itself. This scan occurs
before all other scans.
- the memory of all running processes.
- all drives and their subfolders on the computer.
By default, the scanner scans all file types, regardless of extension.
Full Scan
Boot Sectors Selected
Selected
Not Selected
Examines t
he disk boot sector. Consider disabling this policy if a disk contains a
unique or abnormal boot sector that cannot be scanned.