Table of contents
Topics on this page

Configure Endpoint Security

Endpoint Security is optimized for maximum protection on endpoints and provides items such as device control and desktop intrusion prevention rules.

If you have not registered for a Trend Cloud One account, you can sign up for a free 30 day trial account. Once your account is registered, do the following:

  1. Log in to the Trend Cloud One.

  2. Select Trend Cloud One - Endpoint & Workload Security.

  3. Create a policy to protect your computers.

    Refrain from selecting or configuring any modules listed under WORKLOAD REQUIRED, as they require a Workload Security license. If you select one, you will incur the higher costs associated with the Workload Security license.

  4. Assign the Intrusion Prevention rules:

    1. Select Intrusion Prevention.

    2. Select Assign/Unassign.

    3. From the Rule Selection list, select Select all Core Endpoint & Workload Rules, and then click OK.


      If any Workload Rules are assigned during this process, the Intrusion Prevention License Type tooltip displays the Workload tag, denoting that it requires the use of the Workload Security license.

      To ensure that only Intrusion Prevention rules available with Endpoint Security have been selected, verify that the tooltip reads Intrusion Prevention License Type: Endpoint.

    4. Switch Implement core Endpoint & Workload rules automatically to Yes.
      Workload Security assigns all core Endpoint & Workload rules to this computer whenever Rule Updates occurs.
      Manually unassigned core Endpoint & Workload rules remain unassigned by Workload Security after Rule Updates.

    5. Click Save.

  5. Ensure that Container Protection is not enabled:

    1. Select Settings.
    2. Open the Container Protection tab.
    3. Ensure the all lists show No and select Save.

  6. Deploy agents to your computers.

    You should use deployment scripts to add and protect computers, as it allows you to easily install and activate the agent, and assign a policy. Alternatively, you can manually install the agent. If you decide to manually install the agent, you also need to activate the agent and assign a policy to a computer manually.