Document automatic definition update setting

This commit is contained in:
Tudor Dobrila 2020-06-22 15:57:44 -07:00
parent 81318210c8
commit 7f1be48fa6
2 changed files with 38 additions and 6 deletions

View File

@ -259,18 +259,29 @@ Determines whether suspicious samples (that are likely to contain threats) are s
| **Data type** | String |
| **Possible values** | none <br/> safe (default) <br/> all |
#### Enable / disable automatic security intelligence updates
Determines whether security intelligence updates are installed automatically:
|||
|:---|:---|
| **Key** | automaticDefinitionUpdateEnabled |
| **Data type** | Boolean |
| **Possible values** | true (default) <br/> false |
## Recommended configuration profile
To get started, we recommend the following configuration profile for your enterprise to take advantage of all protection features that Microsoft Defender ATP provides.
The following configuration profile will:
- Enable real-time protection (RTP).
- Enable real-time protection (RTP)
- Specify how the following threat types are handled:
- **Potentially unwanted applications (PUA)** are blocked.
- **Archive bombs** (file with a high compression rate) are audited to the product logs.
- Enable cloud-delivered protection.
- Enable automatic sample submission at `safe` level.
- **Potentially unwanted applications (PUA)** are blocked
- **Archive bombs** (file with a high compression rate) are audited to the product logs
- Enable automatic security intelligence updates
- Enable cloud-delivered protection
- Enable automatic sample submission at `safe` level
### Sample profile
@ -290,6 +301,7 @@ The following configuration profile will:
]
},
"cloudService":{
"automaticDefinitionUpdateEnabled":true,
"automaticSampleSubmissionConsent":"safe",
"enabled":true
}
@ -350,7 +362,8 @@ The following configuration profile contains entries for all settings described
"cloudService":{
"enabled":true,
"diagnosticLevel":"optional",
"automaticSampleSubmissionConsent":"safe"
"automaticSampleSubmissionConsent":"safe",
"automaticDefinitionUpdateEnabled":true
}
}
```

View File

@ -277,6 +277,16 @@ Determines whether suspicious samples (that are likely to contain threats) are s
| **Data type** | Boolean |
| **Possible values** | true (default) <br/> false |
#### Enable / disable automatic security intelligence updates
Determines whether security intelligence updates are installed automatically:
|||
|:---|:---|
| **Key** | automaticDefinitionUpdateEnabled |
| **Data type** | Boolean |
| **Possible values** | true (default) <br/> false |
### User interface preferences
Manage the preferences for the user interface of Microsoft Defender ATP for Mac.
@ -358,6 +368,7 @@ The following configuration profile (or, in case of JAMF, a property list that c
- Specify how the following threat types are handled:
- **Potentially unwanted applications (PUA)** are blocked
- **Archive bombs** (file with a high compression rate) are audited to Microsoft Defender ATP logs
- Enable automatic security intelligence updates
- Enable cloud-delivered protection
- Enable automatic sample submission
@ -394,6 +405,8 @@ The following configuration profile (or, in case of JAMF, a property list that c
<true/>
<key>automaticSampleSubmission</key>
<true/>
<key>automaticDefinitionUpdateEnabled</key>
<true/>
</dict>
</dict>
</plist>
@ -471,6 +484,8 @@ The following configuration profile (or, in case of JAMF, a property list that c
<true/>
<key>automaticSampleSubmission</key>
<true/>
<key>automaticDefinitionUpdateEnabled</key>
<true/>
</dict>
</dict>
</array>
@ -563,6 +578,8 @@ The following templates contain entries for all settings described in this docum
<string>optional</string>
<key>automaticSampleSubmission</key>
<true/>
<key>automaticDefinitionUpdateEnabled</key>
<true/>
</dict>
<key>edr</key>
<dict>
@ -701,6 +718,8 @@ The following templates contain entries for all settings described in this docum
<string>optional</string>
<key>automaticSampleSubmission</key>
<true/>
<key>automaticDefinitionUpdateEnabled</key>
<true/>
</dict>
<key>edr</key>
<dict>