Views:

Worry-Free Business Security Services Console

Security Agent Installation

Worry-Free Business Security Services supports security program installation on Windows, Mac, Android, iOS and Chromebook devices and collects data from user computers or mobile devices to identify an endpoint for administrators.

Data collected
  • Host name
  • User name
  • IP address
  • Mac address
  • Agent GUID
  • Mobile number
  • Domain
Console location

N/A

 
If you do not want to allow Trend Micro to collect this personal data, do not install the agent program.
 
Console settings

Back to top

Endpoint Labeling

Worry-Free Services supports easier endpoint management by assigning a name or a unique identifier as label to each endpoint.

Data collected
  • Email address
  • User name
  • Phone number
  • IP address
Console location
  • Worry Free Business Security Services Console > Administration > General Settings > Endpoint Labeling
    Endpoint Labeling
  • Worry-Free Business Security Services Console > Security Agents
    Security Agents
Console settings

Back to top

Locate Mobile Device

Worry-Free Business Security Services collects data from mobile devices to help administrators locate devices remotely.

Data collected
  • Geo-location
  • IMEI
  • Serial number
  • Wi-Fi Mac address
  • Model
  • Available storage
  • MEID
  • Modem firmware
  • Bluetooth MAC address
  • Phone number
Console location

Worry-Free Business Security Services Console > Security Agents > Select an Android device > Tasks > Remote Locate

Console settings

Remote Locate

Remote Locate

Back to top

Threat Investigation for Endpoints

Threat Investigation for endpoints can quickly identify potential endpoints for further analysis.

 
This feature requires special licensing
 
Data collected
  • FQDN / IP address / Host name
  • Domain
  • SHA-1
  • SHA-256
  • User name
  • File name
  • File hash value
  • File directory
  • Registry key
  • Registry value name
  • Registry value data
  • CLI command
  • IOC file
Console location
  • Worry-Free Business Security Services Console > DETECTION & RESPONSE > Threat Investigation (Quick)
    Quick
  • Worry-Free Business Security Services Console > DETECTION & RESPONSE > Threat Investigation (Advanced/User-defined)
    Advanced-User-defined
  • Worry-Free Business Security Services Console > DETECTION & RESPONSE > Threat Investigation (Advanced/OpenIOC file)
    Advanced-OpenIOC
Console settings

Back to top

Threat Investigation for Emails

Threat Investigation for emails can quickly identify potential email messages for further analysis.

 
This feature requires special licensing.
 
Data collected
  • Sender address
  • Source IP / Domain
  • Recipient address
  • Subject
  • File name
  • File hash value
  • File extension
  • URL
Console location
  • Worry-Free Business Security Services Console > DETECTION & RESPONSE > Threat Investigation
    Threat Investigation
  • Worry-Free Business Security Services Console > DETECTION & RESPONSE > Threat Investigation (Advanced)
    Threat Investigation - Adv
Console settings

Back to top

Reports

Reports provide summary information and top statistics about security events that occurred on the network during a specific period. Worry-Free Services allows administrators to configure a new one-time or scheduled report.

Data collected
  • User name
  • Email address
  • Phone number
  • IP address
Console locationWorry-Free Business Security Services Console > Report Settings
Console settingsReport Settings
Report Settings

Back to top

Troubleshooting Settings

Support engineers for Worry-Free Business Security Services may collect this information during troubleshooting operations to solve issues with Security Agents.

Data collected
  • User name
  • Host name
  • Domain name
  • IP address
  • MAC address
  • File name
  • File path
  • URL
Console locationWorry-Free Business Security Services Console > Administration > General Settings
Console settingsGeneral Settings
General Settings

Back to top

Apple Push Notification Service Certificate

Worry-Free Business Security Services requires a valid Apple Push Notification service (APNs) certificate to manage iOS devices.

Data collected
  • Apple ID
  • Serial number
  • UID
Console locationWorry-Free Business Security Services Console > Administration > General Settings > Apple Push Notification Service Certificate
Console settingsApple Push Notification Service Certificate
Apple Push Notif

Back to top

Terms of Use for Android and iOS Devices

Trend Micro provides the Terms of Use as a template and recommends customizing the template to better suit customer’s company.

Data collected
  • User name
  • Company information
  • Email Address
  • Phone number
  • IP address
Console locationWorry-Free Business Security Services Console > Administration > General Settings > Terms of Use for Android and iOS Devices
Console settingsTerms of Use for Android and iOS Devices
Terms of Use

Back to top

User Accounts

User account information includes personal data.

Data collected
  • Account name
  • Email address
  • User name
  • Specify groups
Console locationWorry-Free Business Security Services Console > Administration > User Accounts
Console settingsUser Accounts
Useraccount1
User Accounts

Back to top

Notifications

Worry-Free Business Security Services provides email notification messages for action required and warning events and allows administrators to customize the subject line and the message body of each event notification.

Data collected
  • User name
  • Email address
  • Phone number
  • Company information
  • IP address
Console location
  • Worry-Free Business Security Services Console > Administration > Notifications > Settings
    Settings
  • Worry-Free Business Security Services Console > Administration > Notifications > Action Required
    Action Required
  • Worry-Free Business Security Services Console > Administration > Notifications > Warnings
    Warnings
  • Worry-Free Business Security Services Console > Administration > Notifications > Noteworthy Events

     
    This feature requires special licensing.
     

    Noteworthy Events

Console settings

Back to top

Active Directory Settings

Worry-Free Business Security Services allows administrators to manage Security Agents using the Active Directory (AD) organizational unit (OU) structure And Microsoft Entra ID, cloud-based directory and identity management service . Administrators can set up automatic synchronization Microsoft Entra ID, synchronization with their Active Directory structure using the Trend Micro Common Active Directory Synchronization Tool, or import the Active Directory structure manually.

Data collected

Active Directory:

  • OU GUID
  • OU name
  • OU distinguished name
  • OU last modify time
  • Operating system

Microsoft Entra ID:

  • Administrator's email Business phone
  • Business address of the organization (country, postcode, street)
  • Device name
  • Device GUID
  • OS Version
Console locationWorry-Free Business Security Services Console > Administration > Active Directory Settings
Console settingsActive Directory Settings
AD Settings

ADsettings2

Back to top

User Behavior Tracking

Worry-Free Business Security Services collects data from web browsers used to access the Worry-Free Business Security Services web console. The collected data help Trend Micro understand how administrators use the web console and enhance the user experience.

Data collected

Active Directory:

  • Visited URLs on the Worry-Free Business Security Services web console
Console location

N/A

Console settings

Back to top

Tools: On-Premises Server Migration Tool

Worry-Free Business Security Services provides the tool to migrate Security Agent and policy settings from an on-premises server (OfficeScan or Worry-Free Business Security) to the Worry-Free Business Security Services web console.

Data collected
  • Host name

Migrated Policy Settings:

  • File name
  • File path
  • URL
  • IP address
Console locationWorry-Free Business Security Services Console > Administration > Tools > On-Premises Server Migration Tool
Console settingsOn-Premises Server Migration Tool
On-Premises Server Migration Tool

Back to top

Worry-Free Business Security Services Console – Policy Settings

Policy Management > Target and Service Settings

Worry-Free Business Security Services provides Policy Management to manage security settings in a list of policies and apply policies to specified targets (groups or endpoints).

 
The setting is only available when Policy Management is set to Classic Mode.
 
Data collected
  • Phone number
  • Email address
  • User name
  • IP address
Console locationWorry-Free Business Security Services Console > Policies > Policy Management > +Add > Target and Services Settings
Console settingsTarget and Services Settings
Target and Services Settings

Back to top

YouTube Video Blocker (Windows/Chromebook)

Worry-Free Business Security Services provides configuration to block all or specified YouTube channels. This feature is only available on Chromebook and Microsoft Edge browser extension in Windows.

 
The YouTube Video Blocker feature requires special licensing.
 
Data collected
  • URL
  • User name
  • Email address
  • Phone number
  • IP address
  • Domain name
Console locationWorry-Free Business Security Services Console > Policies > Global Security Agent Settings > Security Settings > YouTube Video Blocker (Windows/Chromebook)
Console settingsYouTube Video Blocker (Windows/Chromebook)
YouTube Video Blocker

Back to top

Enhanced Threat Analysis/Noteworthy Events

Worry-Free Business Security Services collects detailed threat events to the server for Enhanced Threat Analysis and Noteworthy Events.

 
The Noteworthy Events feature requires special licensing.
 
Data collected

Process Information

  • Process image path
  • Process creation time
  • Process owner
  • Process command line
  • Process ID
  • Process image file size
  • Process image file signer
  • Process image file SHA-1
  • Process image file SHA-256
  • Process image file type

File Information

  • File path
  • File creation time
  • File modification time
  • File size
  • File signer
  • File SHA-1
  • File SHA-256
  • File type
  • File owner

Registry data

  • Registry Key
  • Registry Value Name

URL Information

  • URL
  • URL referrer

WMI

  • WMI object path
Console locationWorry-Free Business Security Services Console > Policies > Global Security Agent Settings > Agent Control > Security Agent Logs > Send detailed threat events to the server for Enhanced Threat Analysis
Console settingsSend detailed threat events to the server for Enhanced Threat Analysis
Send detailed threat events

Back to top

Traffic Control for Isolated Endpoints

Worry-Free Business Security Services allows administrators to configure allowed network traffic between isolated endpoints and other management tools.

 
This feature comes with the Worry-Free Services Endpoint Detection & Response add-on.
 
Data collected
  • IP address
Console locationWorry-Free Business Security Services Console > Policies > Global Security Agent Settings > Isolated Endpoints > Allowed Inbound Traffic/Allowed Outbound Traffic
Console settingsAllowed Inbound Traffic/Allowed Outbound Traffic
Allowed Inbound-Outbound Traffic

Back to top

Help Desk Notice

Worry-Free Business Security Services allows administrators to configure customized help for their end users. A customized label, email address to contact someone for help, and hover over text are configurable.

Data collected
  • User name
  • Phone number
  • Email address
  • IP address
Console locationWorry-Free Business Security Services Console > Policies > Global Security Agent Settings > Agent Control > Help Desk Notice > Display Help Desk information on the Security Agent
Console settingsDisplay Help Desk information on the Security Agent
Display Help Desk info

Back to top

Web Reputation / URL Filtering: Approved URL List

The Approved URL Lists contain URLs that the Security Agent does not monitor using Web Reputation / URL Filtering.

Data collected
  • URL
Console locationWorry-Free Business Security Services Console > Policies > Global Exception Lists > Web Reputation / URL Filtering > Approved IP Address List
Console settingsApproved IP Address List
Approved IP Address List

Back to top

Web Reputation / URL Filtering: Blocked URL List

The Blocked URL Lists contain URLs that the Security Agent does not monitor using Web Reputation/URL Filtering.

Data collected
  • URL
Console locationWorry-Free Business Security Services Console > Policies > Global Exception Lists > Web Reputation / URL Filtering > Blocked IP Address List
Console settingsBlocked IP Address List
Blocked IP Address List

Back to top

Web Reputation / URL Filtering: Approved IP Address List

The global Approved IP Address List allows access to specified destination IP addresses.

Data collected
  • IP Address
Console locationWorry-Free Business Security Services Console > Policies > Global Exception Lists > Web Reputation / URL Filtering > Approved IP Addresses
Console settingsApproved IP Addresses
Approved IP Addresses

Back to top

Web Reputation / URL Filtering: Allowed Process List

The global Allowed Process List allows specified processes to access websites.

Data collected
  • User name
  • Phone number
  • IP Address
  • Email address
  • File Path
  • Processes name
Console locationWorry-Free Business Security Services Console > Policies > Policy Settings > Global Exception Lists > Web Reputation / URL Filtering > Allowed Process List
Console settingsAllowed Process List
Allowed Process List

Back to top

Malware Scan Exclusions: Trusted Windows Program List

The Trusted Windows Program List excludes specified programs and associated processes from Behavior Monitoring, Device Control, and Real-Time Scan.

Data collected
  • Program path
Console locationWorry-Free Business Security Services Console > Policies > Policy Settings > Global Exception Lists > Malware Scan Exclusions > Trusted Windows Program List
Console settingsTrusted Windows Program List
Trusted Windows Program List

Back to top

Malware Scan Exclusions: Trusted Mac Program List

The Trusted Mac Program List excludes specified programs and associated processes from Behavior Monitoring, Device Control, and Real-Time Scan.

Data collected
  • Program path
Console locationWorry-Free Business Security Services Console > Policies > Policy Settings > Global Exception Lists > Malware Scan Exclusions > Trusted Mac Program List
Console settingsTrusted Mac Program List
Trusted Mac Program List

Back to top

Malware Scan Exclusions: Predictive Machine Learning Exception List

The Predictive Machine Learning Exception List contains file hashes that the Security Agent does not scan during Predictive Machine Learning scanning.

Data collected
  • SHA-1 file hash
  • User name
  • Email address
  • IP address
  • Phone number
Console locationWorry-Free Business Security Services Console > Policies > Policy Settings > Global Exception Lists > Malware Scan Exclusions > Predictive Machine Learning Exception List
Console settingsPredictive Machine Learning Exception List
PML Exception List

Back to top

Device Control: Allowed USB Device List

The Allowed USB Device list contains the USB devices information to allow access to specified external storage devices from Device Control.

Data collected
  • User name
  • Phone number
  • Email address
  • Device name
  • Device Serial ID
Console locationWorry-Free Business Security Services Console > Policies > Policy Settings > Global Exception Lists > Device Control > Allowed USB Device List
Console settingsAllowed USB Device List
Allowed USB Device List

Back to top

Vulnerability Protection: Approved IP Address List

The global Approved IP Address List for Vulnerability Protection allow access from specified IP addresses.

Data collected
  • IP Address
Console locationWorry-Free Business Security Services Console > Policies > Global Exception Lists > Vulnerability Protection > Approved IP Address List
Console settingsApproved IP Address List
Approved IP Address List

Back to top

User-Defined Suspicious Object List

Worry-Free Business Security Services provides the User-Defined Suspicious Object List to add objects that are considered suspicious on the network but are not currently in the Virtual Analyzer Suspicious Object List.

 
This feature comes with the Worry-Free Services Endpoint Detection & Response add-on.
 
Data collected
  • File name
  • File path
  • URL
  • Domain name
  • IP address
  • Phone number
  • Email address
  • User name
Console locationWorry-Free Business Security Services Console > Policies > User-Defined Suspicious Objects > +Add > File/IP address/URL/Domain/Notes
Console settingsFile/IP address/URL/Domain/Notes
UDSO list

Back to top

Virtual Analyzer Suspicious Objects

Worry-Free Business Security Services provides the list to exclude objects from the Virtual Analyzer Suspicious Object List based on the file SHA-1, IP address, URL, or domain.

 
This feature comes with the Worry-Free Business Security Services Endpoint Detection & Response add-on.
 
Data collected
  • File name
  • File path
  • URL
  • Domain name
  • IP address
  • SHA-1
  • Phone number
  • Email address
  • User name
Console location
  • Worry-Free Business Security Services Console > Policies > Virtual Analyzer Suspicious Objects > Exceptions > +Add > File/IP address/URL/Domain/SHA-1/Notes
    add VA Suspicious Objects
  • Worry-Free Business Security Services Console > Policies > Virtual Analyzer Suspicious Objects > Exceptions > +Import > File/IP address/URL/Domain/SHA-1/Note
    import VA Suspicious Objects
Console settings

Back to top

Application Control Rules: Allow/Block

Worry-Free Business Security Services supports to configure Allow or Block rules to limit the applications that can execute or install on endpoints. And administrators can then assign these rules to Security Agent policy settings.

Data collected
  • Phone number
  • Email address
  • User name
  • File name
  • File path
  • SHA-256
Console location
  • Policies > Application Control Rules > Add Rule > Allow
    Allow
  • Policies > Application Control Rules > Add Rule > Block
    Block
Console settings

Back to top