Protection for Servers

These components can be installed on supported servers in the same way that they are installed on workstations:

  • Anti-Malware

  • Firewall

  • Compliance

    Important -

    Application Control is not supported on all versions of Windows Server.

    Do not deploy this component on clients that run operating systems that are not supported. You can also disable it in the policy.

    To disable components on operating systems that are not supported:

    1. Configure a rule that disables the unsupported component.

    2. Install the policy on all clients that run operating systems that do not support the component.

If you install Anti-Malware and Firewall policies on servers, it is best for the policies to be machine-based and not user-based. In machine-based policy, the policies assigned to the machine have priority over the policies assigned to users who connect to the machine.

To enforce machine-based policies, we strongly recommend that you put all servers in a server Virtual Group.

For supported servers, see the Release Notes for your Endpoint Security client version.