<< PREVIOUS  NEXT >>

 

MONITORING MODES

 

To modify the VSP Host Monitoring mode:

  1. On the Host Monitoring page, click the below icon

    Picture 1073742228

  2. Select all the required hosts

    Picture 1073742226

  3. Select the required option

    1. Protect – Processes and libraries (if library monitoring is enabled) that are not found in the process profile are suspended/blocked immediately. They are not acted upon until the user adds the detected errant process/library to the allowlist or deletes it on CMS.

      1. In cases where the errant process/library is added to the allowlist, the process/library is resumed

      2. In cases where the errant process/library is deleted from the allowlist, the process (or the process containing the errant library) is killed

      3. An un-allowlisted process on Windows is NOT allowed to execute

      4. Click Protect

        Picture 1073742225

    2. Detect – Processes and libraries (if library monitoring is enabled) that are not found in the process profile are reported immediately to CMS.

      1. The processes/libraries are not stopped from executing

      2. If additional protection actions are configured in a protection profile, these actions are executed in response to a reported incident

      3. Click Detect

        Picture 1073742214

    3. Disable – The selected host is NOT monitored. Click Disable

      Picture 1073742202

       

        NOTE:

        Protect, Detect or Disable options can be chosen for each host

       

  4. Click YES on the confirmation screen

    Picture 1073742205

  5. Click CLOSE

    Picture 1073742206

 

<< PREVIOUS  NEXT >>