Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated description of security states defined by Security Center. #4485

Merged
merged 3 commits into from
Nov 12, 2024
Merged

Updated description of security states defined by Security Center. #4485

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1e31cdb
Updated description of security states defined by Security Center.
mariusdo Feb 22, 2024
608f45c
Merge remote-tracking branch 'upstream/main' into mariudo-docs
mariusdo Sep 6, 2024
086db57
Update endpoint-protection-client-faq.yml
dougeby Nov 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 12 additions & 1 deletion memdocs/configmgr/protect/deploy-use/endpoint-protection-client-faq.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -236,7 +236,18 @@ sections:
- Yellow indicates that your computer's status is "potentially unprotected."

- Red indicates that your computer's status is "at risk."

- question: |
Can you describe a little bit what protected, potentially protected or at risk means ?
answer: |

Depending whether Defender or another antivirus product is being used as primary provider, the general states above represented by a color show the overall asessment of the security state of the device.
In case of security level being satisfactory, a green label will be provided.

The "potentially unprotected" state is mostly due to settings - not directly impacting detection - not being set to the recommended security level. For example, in Defender case, a quick scan didn't run in a while, or cloud protection is turned off.
In the case of another antivirus, those states are reported via Security Center and could be in basically the following categories - a scan is recommended, settings change is recommended or an update is recomended.

The "at risk" status represents serious security issues, such as a malware detection, software out of date or antivirus not running at all. In the case of another Antivirus that could mean license has expired.

- question: |
How to set up Windows Defender or Endpoint Protection alerts?
answer: |
Expand Down