Views:
Server & Workload Protection can run recommendation scans on computers to help identify which rules you should apply or remove for Intrusion Prevention, Integrity Monitoring, and Log Inspection. The resulting recommendations are a good place to start when establishing security rules. However, you may need to implement additional rules for common vulnerabilities.
  • Agents that support the enhanced recommendation scan display enhanced recommendation scan indicator next to Agent on the Overview page.
    The enhanced recommendation scan has the following requirements:
    • Agent version 20.0.1-12510 or later
    • Activity Monitoring enabled
    • Internet of Things (IoT) traffic to Amazon Web Services (AWS) permitted through firewalls
  • Agents that do not meet the requirements for the enhanced recommendation scan automatically use the classic recommendation scan instead.