Configuring the Threat Prevention Policy

The Threat Prevention policy includes these components:

• Web & Files Protection - Includes download protection, credential protection and Files protection.

• Behavioral Protection - Includes Anti-Bot, Anti-Ransomware and Anti-Exploit.

• Analysis & Remediation - Includes forensics and file Remediation.

The Threat Prevention policy unifies all the Threat Prevention components. This is different from the Policy Rule Base in SmartEndpoint, where each Threat Prevention component has its own set of rules. The unified policy lets the administrator control all Threat Prevention components in one Policy. Each rule in the Policy defines the scope which the rule applies to and the Threat Prevention components which are activated.

The Threat Prevention policy contains a pre-defined Default Policy rule, which applies to the entire organization.

Each new rule you create, has pre-defined settings, which you can then edit in the right section of the screen.

The Policy Rule Base consists of these parts: