Table of contents
Topics on this page

Overview of recommendation scans

Workload Security can run recommendation scans on computers to help identify which rules you should apply or remove for Intrusion Prevention, Integrity Monitoring, and Log Inspection. The resulting recommendations are a good place to start when establishing security rules. However, you may need to implement additional rules for common vulnerabilities. See Implement additional rules for common vulnerabilities.

  • Agents that support the enhanced recommendation scan display Enhanced recommendation scan icon next to Agent on the Overview page.
  • The enhanced recommendation scan has the following requirements:
    • Agent version 20.0.1-12510 or later
    • Activity Monitoring enabled
    • Internet of Things (IoT) traffic to Amazon Web Services (AWS) permitted through firewalls
  • Agents that do not meet the requirements for the enhanced recommendation scan automatically use the classic recommendation scan instead.