Features Disabled by Default

The following table includes a list of main product features that are disabled by default, and specifies how to enable each feature.

Note

For a list of scenarios where a machine reboot is required, see When is a machine reboot required?

Feature

Product Area

How to Enable

Anti-Ransomware (using canary files)

NGAV

Enable in a sensor policy in the Anti-Ransomware screen

Application control

Detection

Enable in a sensor policy in the App Control screen

Anti-Malware Artificial Intelligence analysis

NGAV

Enable in a sensor policy in the Anti-Malware screen

Anti-Ransomware (using canary files)

NGAV

Enable in a sensor policy in the Anti-Ransomware screen or Enable via command line

Application control

Detection

Enable in a sensor policy in the App Control screen or Enable via command line

Artificial Intelligence analysis

NGAV

Enable in a sensor policy in the Anti-Malware screen or Enable via command line

Behavioral execution prevention

NGAV

Enable in a sensor policy in the Behavioral Execution Prevention

Command line-based on-demand Anti-Malware scans

NGAV

Contact Technical Support

Decommission sensors

Sensor Management

Contact Technical Support

Device Controls screen

Endpoint controls

Contact Technical Support

Endpoint controls

Endpoint controls

Contact Customer Success to add this feature

Endpoint machine notifications and Endpoint UI settings (icon/notifications)

User Management

Enable via UI > Policy Management

Exploit protection

NGAV

Enable in a sensor policy in the Exploit Protection screen

Deploy and run incident response tools

Incident Response

Contact your Customer Success Manager to purchase DFIR package

Deploy and run forensic data ingestion tools

Incident Response

Contact your Customer Success Manager to purchase DFIR package

File event collection

Detection

Enable in the Collection features screen of sensor policy

Live File search

Response

Contact Customer Success to purchase DFIR package

Mac AV

NGAV

Enable in a sensor policy in the Anti-Malware screen

Malware alert via syslog

NGAV

Contact Technical Support

Non-Executable file data collection

Detection

Enable in a sensor policy in the Collection features screen

Predictive ransomware protection

NGAV

Enable in the Predictive Ransomware Protection screen of a sensor policy

Predictive Request Times of Investigation Queries

Hunt

Contact Technical Support (if you have the new Data Platform infrastructure)

Fileless protection (previously named PowerShell and .NET)

NGAV

Enable in a sensor policy in the Fileless Protection screen

Registry event collection

Detection

Enable in the Collection features screen of sensor policy

Remote Shell

Response

For Windows machines, contact Technical Support.

For Mac and Linux machines, contact Customer Success to add this feature to your environment.

Remote Shell Unrestricted Mode

Response

Contact Technical Support

Right click on-demand Anti-Malware scans

NGAV

Contact Technical Support

Scaled Sensor Upgrades

Sensor management

Contact Technical Support

Scheduled scan (full/quick scan)

NGAV

Enable in a sensor policy in the Anti-Malware screen

Signature-based analysis

NGAV

Enable in a sensor policy in the Anti-Malware screen

Signature-based analysis - advanced configuration options

NGAV

Contact Technical Support

Single Sign On

User Management

Contact Technical Support

Sensor grouping

Sensor management

Contact Technical Support

Sensor tampering protection (Infrastructure settings)

Sensor management

Contact Customer Success to add this feature to your environment

System Viewer Role

User permissions

Contact Technical Support

Uninstall sensors using an uninstall file

Sensor deployment

Contant Technical Support

Variant file prevention

NGAV

Enable in a sensor policy in the Anti-Malware screen

Variant payload prevention

NGAV

Enable in a sensor policy in the Behavioral Execution Prevention screen