Behavioral Protection - Low Memory Mode

Recommendation

Do not enable Low Memory mode (default: Disabled).

Configuration Path

Policy > Threat Prevention > Policy Capabilities > Behavioral Protection > Advanced Settings > Behavioral Guard & Anti-Ransomware

Description

Low Memory mode loads a limited subset of behavioral detection signatures optimized for environments with strict memory constraints. This mode reduces memory consumption but lowers detection coverage.

Windows clients version E89.10 and higher include performance and stability optimizations that significantly reduce CPU and memory usage. As a result, the trade-off between memory usage and detection coverage is no longer required.

Operational Guidance

  • Deploy Endpoint Security clients on Windows version E89.10 or higher.

  • Do not enable Low Memory mode in production environments.

  • Note that reduced detection coverage increases risk exposure.

  • This mode is planned for gradual deprecation in future Endpoint Security versions