QuestionQ139Verified/Policy ApplicationCopy linkReport a problemAsk AstroTutorSave questionYou want to configure a detection-only policy. How should this be set up in the policy settings?AEnable the detection sliders and disable the prevention sliders. Then ensure that Next Gen Antivirus is enabled so it will disable Windows Defender.BSelect the "Detect-Only" template. Disable hash blocking and exclusions.CYou can't create a policy that detects but does not prevent. Use Custom IOA rules to detect.DSet the Next-Gen Antivirus detection settings to the desired detection level and all the prevention sliders to disabled. Do not activate any of the other blocking or malware prevention options.Show AnswerAnswerExplanationA detection-only configuration uses the desired Next-Gen Antivirus detection level but disables all prevention sliders and does not enable other blocking or malware-prevention options. This allows detections to be recorded without automatically preventing the activity.Show comments1Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion