Server & Workload Protection can run recommendation scans on computers to help identify which rules you should
apply or remove for Intrusion Prevention, Integrity Monitoring, and Log Inspection.
The resulting recommendations are a good place to start when establishing security
rules. However, you may need to implement additional rules for common vulnerabilities.
-
Agents that support the enhanced recommendation scan display
next to Agent on the Overview page.
The enhanced recommendation scan has the following requirements: -
-
Agent version 20.0.1-12510 or later
-
Activity Monitoring enabled
-
Internet of Things (IoT) traffic to Amazon Web Services (AWS) permitted through firewalls
-
-
Agents that do not meet the requirements for the enhanced recommendation scan automatically use the classic recommendation scan instead.