Self-protection

Self-protection prevents unauthorized changes to the software's own processes, registry records, executable and configuration files, and backups located in your local folders.

Administrators can enable Self-protection, without enabling Active Protection.

Default setting: On.

To enable Self-protection

1. In the Create protection plan window, expand the Antivirus & Antimalware protection module.
2. Click Self-protection.
3. Use the Self-protection toggle to enable it.

Agent uninstallation protection

The Agent uninstallation protection setting prevents users or third-party software from uninstalling Agent for Windows or modifying its components outside the period configured in the Allow updates or uninstallation of the selected agents for the following period field.

Default setting: Enabled

When enabled, every attempt to uninstall or modify the protection agent outside the configured period triggers an alert.

An administrator user can review the alert and decide whether to allow modifications to the agent for 1 hour, or configure a period with duration between 1 hour and 7 days during which agent uninstallation and modifications will be allowed. See To allow the modification of an agent with uninstallation protection enabled.

To disable Agent uninstallation protection

1. When the Self-protection feature is enabled, clear the Agent uninstallation protection checkbox.
2. Click Done.

Allowing processes to modify backups

The Allow specific processes to modify backups setting is only available when the Self-protection setting is enabled.

It applies to files in local folders with the following extensions:

• .tibx
• .tib
• .tia

The Allow specific processes to modify backups setting lets you specify the processes that are allowed to modify the backup files, even though these files are protected by self-protection. This is useful, for example, if you remove backup files or move them to a different location by using a script.

When this setting is disabled, the backup files can be modified only by processes signed by the backup software vendor. This allows the software to apply retention rules and to remove backups when a user requests this from the web interface. Other processes, no matter suspicious or not, cannot modify the backups.

When this setting is enabled, you can allow other processes to modify the backups.

Default setting: Disabled.

To enable Allow specific processes to modify backups

1. When the Self-protection feature is enabled, select the Allow specific processes to modify backups checkbox.
2. In the Process to modify backups field, click Add.
3. Enter the full path to the process executable, starting with the drive letter.

4. Click the check mark to the right to save the process.