Protection for Servers

These blades can be installed on supported servers in the same way that they are installed on workstations:

• Anti-Malware
• Firewall
• Compliance

  Important - Application Control is not supported on all versions of Windows Server. Do not deploy this Software Blade on clients that run operating systems that are not supported. You can also disable it in the policy. To disable Software Blades on operating systems that are not supported: Configure a rule that disables the unsupported Software Blade. Install the policy on all clients that run operating systems that do not support the Software Blade.

If you install Anti-Malware and Firewall policies on servers, it is best for the policies to be machine-based and not user-based. In machine-based policy, the policies assigned to the machine have priority over the policies assigned to users who connect to the machine.

To enforce machine-based policies, we strongly recommend that you put all servers in a server virtual group.

For supported servers, see the Release Notes for your Endpoint Security client version.