Security Policy - Best Practices

Use these best practices to configure and harden the Endpoint Security policy after the initial deployment.

Endpoint Security includes Endpoint Management as a Service (EPMaaS), a cloud-based service that manages policies and deployments for Endpoint Security clients.

Threat Prevention Policy Profile - Initial Baseline

Recommendation

Select the predefined Optimized Threat Prevention policy profile.

Description

The Optimized Threat Prevention policy profile aligns with security best practices and provides a balanced baseline for endpoint protection. It enables a comprehensive set of prevention capabilities that protect against common and advanced attack techniques while maintaining operational stability.

The Optimized profile can be further hardened with additional recommendations described in this topic. The Optimized profile can be further hardened with additional recommendations described in this topic.

Operational Guidance

  • Use the Optimized profile as the baseline after initial deployment.

  • Switch from Detect or Tuning profiles to the Optimized profile.

  • Apply additional hardening steps incrementally.