Monday, April 9, 2018

Threat Prevention tab




Normally, there is no need for tuning the cache.
To change the relevant settings:
A.      Go to Threat Prevention tab.
B.      In the left tree, expand the Advanced - click on Engine Settings.
C.      Scroll to the bottom - in the Threat Emulation Settings section, click on the Configure settings... button.
D.      Set the desired limits:
o   Maximum file size for emulation - Files that are larger than this value are not sent for emulation (because large files can reduce network performance)
o   Maximum emulation time - The maximal time that Threat Emulation does analysis on a file (used only for a Local Emulation)
o   Maximum file time in queue - The maximal time that a file waits for Threat Emulation analysis
o   Number of file hashes to save in local cache - Number of file hashes that are stored in the Threat Emulation local cache

E.      Click on OK.
F.      Install the Threat Prevention policy.