Policy mapping for Updating Worry-Free macOS agents

Views:

Review how policy settings line up between Worry-Free Security Agents and TrendAI Vision One™ Endpoint Security Policies.

The following table details the mapping between Worry-Free policy settings and Endpoint Security Policies when migrating your Worry-Free policy settings to TrendAI Vision One™.

Worry-Free policy module	Feature name	Worry-Free policy settings	TrendAI Vision One™ Endpoint Security module and settings	Migration/ Applied settings
Scan Settings	Scan Method	Smart Scan Conventional Scan	N/A	No migration
	Monitoring Level	N/A	Anti-Malware → Monitoring Level Detection Cautious Moderate (Default) Aggressive Extra aggressive Prevention Cautious Moderate (Default) Aggressive Extra aggressive	Migrated policies use the default setting
	Real-Time Scan	Enable real-time scan	Anti-Malware → Scan settings Enable real-time scan	Migration supported
	Real-Time Scan	Customize Target and Action	N/A	No migration
	Scheduled Scan	Enable/Disable	Anti-Malware → Scan settings → Scheduled scan	If Worry-Free Services Scheduled Scan is enabled, the configured schedule is migrated to Policy Resources and applied to the Anti-Malware Scheduled scan settings. If disabled, no data is migrated. TrendAI Vision One™ imports the schedule to Policy Resources with the name `Worry-Free Scheduled Scan Task YYYYMMDD`
		Schedule configuration	Anti-Malware → Scan settings → Scheduled scan
		Customize Target and Action	N/A	No migration
	Manual Scan	Customize Target and Action	N/A	No migration
Predictive Machine Learning	Predictive Machine Learning	On/Off	Enabled when Anti-Malware is enabled.	Migration supported
Web Reputation	Web Reputation	On/Off	Web Reputation Enable/Disable	Migration supported
	Security Level	Security Level: High Medium Low	Scan settings, Security level: High Medium (Default) Low	Migrated policies use the default setting
	Untested URLs	Untested URLs: Block websites that have not been tested by Trend Micro	Scan settings, Prevention: Block pages that have not been tested by TrendAI™	Migration supported
	Port monitoring for web protection	N/A	Port monitoring for web protection	Migrated policies use the default setting Use default ports: 80,433,8080
	Access rule	Approved URL Lists Global Approved and Blocked URL Lists Specify exceptions Maximum of 300 URLs for approved URLs.	Web access rules Can select one each of the following list types: Allow without logging - Domain list Allow without logging - URL list Lists are configurable in Policy Resources → Web Lists and support up to 125 URLs or Domains per list	TrendAI Vision One™ creates lists based on the imported data from Worry-Free Services. The migration process validates the URLs in the Global and Specify exceptions lists. Valid URLs are added to a URL list. URLs that fail validation but match the format `https://.{domain}/` are sorted into a domain list. All other invalid URLs are rejected. Duplicate URLs and domains are also rejected. Naming format for migrated lists are: Allow lists: `Worry-Free Approved Domains from Global Exception Lists YYYMMDD` `Worry-Free Approved URLs from Global Exception Lists YYYMMDD` `Worry-Free Approved Domains from Specify Exception Lists YYYMMDD` `Worry-Free Approved URLs from Specify Exception Lists YYYMMDD`
Endpoint Sensor	Endpoint Sensor	On/Off	XDR for Endpoints (EDR): Enable/Disable	XDR for Endpoints (EDR) is enabled only if the Worry-Free Endpoint Sensor is active and onboarded to the Worry-Free XDR for Mac preview
Device Control	Device Control	On/Off	Device Control: Enable/Disable	Migration supported
	Endpoint Settings	CD/DVD	N/A	No migration
		Network drives	N/A	No migration
		USB storage devices Full access Read Block	USB storage devices Allow full access Read only access Block access	Migration supported with the following mapping: Full access → Allow full access Read → Read only access Block → Block access
		Thunderbolt storage devices	N/A	No migration
		Secure Digital (SD) cards	N/A	No migration
	Exceptions	Allowed USB Device List in Policies → Global Exception Lists	Allowed devices	No migration Permission and device information extraction methods differ between Worry-Free and TrendAI Vision One™
URL Filtering	URL Filtering	URL Filtering On/Off Filter Strength Rules Business Hours setting	N/A	No migration
Scan Exclusions	Files File extensions	Up to 64 specified files and up to 64 specified file entries.	Anti-Malware → Scan exclusions Supports up to 10 of each list managed in Policy Resources: Directory lists File lists File extension lists Each list supports up to 125 entries. Policy Resources supports up to 125 of each list type.	Migration supported TrendAI Vision One™ migrates File and File extension lists, and creates one resource list for macOS migration. Directory lists are not migrated. File extensions with wildcards or certain special characters cannot be migrated: `\ \\ / : " < > \| , . * ?`
Approved URLs	Specify Approved URL Lists	Specify Approved URL Lists	Web Reputation	See the Web Reputation entry for more information
Global Exception List	Web Reputation/ URL Filtering	Web Reputation/ URL Filtering Approved URLs: 300 entries	Web Reputation → Web access rules Uses Web Lists configured in Policy Resources Each list contains up to 125 URLs or domains. Can have up to 250 web lists.	Migration supported See the Web Reputation entry for more information
	Malware Scan Exclusions	Trusted Mac Program List Excludes up to 64 specified programs from Real-Time Scan	Exclusions → Trusted Programs List Up to two Program lists can be assigned. Program Lists are managed by Policy Resources. Each list supports up to 125 entries.	Migration supported Trusted programs list is migrated to Policy Resources → Program Lists and automatically applied to the Trusted Programs List in Exclusions. Programs are validated before migration. Invalid entries are not migrated.
	Device Control	Allowed USB Device List Supports up to 20000 devices	Device Control → Allowed devices Can add information directly or import from file	No migration Permission and device information extraction methods differ between Worry-Free and TrendAI Vision One™
Privileges and Other Settings	Privileges	Allow users to configure specified settings on the Security Agent. Scheduled Scan Postpone or cancel Scheduled Scan	Agent Interface: Enabled by default Notification settings Notify users of an upcoming scheduled scan Allow user to postpone a scheduled scan Allow user to skip a scheduled scan	Migration supported Postpone or cancel Scheduled Scan settings are migrated.
	Alerts	Display a notification when the specified events occur. Real-Time Scan Device Control	Agent Interface → Notification Settings Scheduled Scan Threat Protection Anti-Malware Access Control Device Control Firewall Cyber Risk & Security Operations Deepfake detection	Migration supported The following notification settings are migrated: Real-Time Scan Device Control All other alerts in TrendAI Vision One™ use the default settings.
	Update Settings	Disable regular Security Agent upgrade and hotfix deployment	N/A	No migration
Browser Extension	N/A	N/A	Browser Extension	Enabled by default