Views:

Apex One (Mac) Policy Settings

Device Control

Enable Device Control and set permission to Read Only or Block. When the Apex One (Mac) Security Agent detects and blocks a device, the system generates a log entry.

Data collected	Device Name
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Device Control Settings
Console settings

Endpoint Sensor Settings

Endpoint Sensor is a powerful monitoring and investigation tool that identifies the presence, location, and entry point of threats based on endpoint information (such as computer name, IP address, domain file, and processes).

Data collected	File name File path File signer IP address Process name Process command Host name URL
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Endpoint Sensor Settings
Console settings	Enable Endpoint Sensor

Manual Scan: Malware detection

Virus/Malware scanning checks files for known security risks.

Data collected	File name File path
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Manual Scan Settings
Console settings

Predictive Machine Learning

Predictive Machine Learning performs in-depth file analysis to detect emerging unknown security risks.

Data collected	URL File name File path
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Predictive Machine Learning Settings
Console settings	Enable Predictive Machine Learning

Real-time Scan: Malware detection

Virus/Malware scanning checks files for known security risks based on the file operation performed.

Data collected	File path File name
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Real-time Scan Settings
Console settings	Enable Real-time Scan

Scan Exclusion Settings

The Scan Exclusion Lists contain directories and file extensions that Apex One (Mac) Security Agent does not scan.

Data Collected	File path File name
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Scan Exclusion Settings
Console settings	Enable scan exclusion

Scheduled Scan: Malware detection

Virus/Malware scanning checks files for known security risks.

Data Collected	File name File path
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Scheduled Scan Settings
Console settings

Scheduled Scan Settings

The Specify path or full path list contains directories or full file paths that Apex One (Mac) Security Agent scans during a Scheduled Scan.

Data Collected	File path File name
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Scheduled Scan Settings
Console settings	Specify path or full path

Trusted Program List

Add programs to the Trusted Programs List to exclude processes from suspicious activity monitoring.

Data Collected	Program full path
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Trusted Program List
Console settings

Web Reputation Service

Web reputation technology tracks the credibility of web domains accessed by endpoints.

Apex One (Mac) Security Agent sends queries to the Trend Micro Global Smart Scan Server for the following:

External agents
Agents that are unable to connect to the Smart Protection Server (standalone or integrated)
When the Send queries to Smart Protection Servers option is not selected

Data Collected	URL
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Web Reputation Settings
Console settings	• Enable Web Reputation policy (External Agents) • Enable Web Reputation policy (Internal Agents)

Apex One (Mac) Cloud Console

Scan Now: Malware detection

Virus/Malware scanning checks files for known security risks.

Data Collected	File name File path
Console Location	SSO to Apex One (Mac) server Agents > Agent Management > Tasks > Scan Now
Console settings	Scan Now

Smart Feedback

Smart Feedback shares anonymous threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats.

Data Collected	URL File name File path Suspicious executable files
Console Location	SSO to Apex One™ (Mac) as a Service Administration > Smart Feedback
Console settings	Enable Trend Micro Smart Feedback (recommended)

Web Reputation Approved/Blocked URL List

The Approved/Blocked URL Lists contain URLs that Apex One™ (Mac) Security Agent does not monitor using Web Reputation. Web Reputation automatically takes the specified action according to the list type.

Data Collected	URL
Console Location	SSO to Apex One™ (Mac) as a Service Agents > Global Agent Settings > Web Reputation
Console settings	Approved/Blocked URL List

Certified Safe Software Service

Certified Safe Software Service queries Trend Micro data centers to verify the safety of a program detected by Malware Behavior Blocking, Event Monitoring, Firewall, or antivirus scans.

Data Collected	File name Company
Console Location	SSO to Apex One™ (Mac) as a Service Agents > Global Agent Settings > Certified Safe Software Service
Console settings	Enable Certified Safe Software Service for antivirus scan

Standard Notifications

Apex One™ (Mac) server sends notifications to the specified recipients when a security risk is detected.

Data Collected	Email address
Console Location	SSO to Apex One™ (Mac) as a Service Notifications > Standard Notification (Email)
Console settings

Outbreak Notifications

Apex One™ (Mac) server sends notifications to the specified recipients when a security outbreak occurs.

Data Collected	Email address
Console Location	SSO to Apex One™ (Mac) as a Service Notifications > Outbreak Notification (Email)
Console settings

Keywords: data collection,DCN,GDPR

Trend Micro Apex One™ (Mac) Data Collection Notice

Product / Version includes:

Apex One (Mac)All , Apex OneAll

Last updated: 2021/09/10

Solution ID: KA-0009390

Category: Configure

Summary

Apex One (Mac) includes the following modules which may cause the corresponding personal data to be transmitted to Trend Micro. Detailed information and instruction are provided below to opt-out of the personal data collection by disabling specific modules. Modules that cannot be disabled are indicated below.

Apex One (Mac) Policy Settings
Apex One (Mac) Cloud Console

To see where this data is processed, refer to our list of data centers and authorized data subprocessors and their locations.

Apex One (Mac) Policy Settings

Device Control

Enable Device Control and set permission to Read Only or Block. When the Apex One (Mac) Security Agent detects and blocks a device, the system generates a log entry.

Data collected	Device Name
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Device Control Settings
Console settings

Endpoint Sensor Settings

Data collected	File name File path File signer IP address Process name Process command Host name URL
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Endpoint Sensor Settings
Console settings	Enable Endpoint Sensor

Manual Scan: Malware detection

Virus/Malware scanning checks files for known security risks.

Data collected	File name File path
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Manual Scan Settings
Console settings

Predictive Machine Learning

Predictive Machine Learning performs in-depth file analysis to detect emerging unknown security risks.

Data collected	URL File name File path
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Predictive Machine Learning Settings
Console settings	Enable Predictive Machine Learning

Real-time Scan: Malware detection

Virus/Malware scanning checks files for known security risks based on the file operation performed.

Data collected	File path File name
Console location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Real-time Scan Settings
Console settings	Enable Real-time Scan

Scan Exclusion Settings

The Scan Exclusion Lists contain directories and file extensions that Apex One (Mac) Security Agent does not scan.

Data Collected	File path File name
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Scan Exclusion Settings
Console settings	Enable scan exclusion

Scheduled Scan: Malware detection

Virus/Malware scanning checks files for known security risks.

Data Collected	File name File path
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Scheduled Scan Settings
Console settings

Scheduled Scan Settings

The Specify path or full path list contains directories or full file paths that Apex One (Mac) Security Agent scans during a Scheduled Scan.

Data Collected	File path File name
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Scheduled Scan Settings
Console settings	Specify path or full path

Trusted Program List

Add programs to the Trusted Programs List to exclude processes from suspicious activity monitoring.

Data Collected	Program full path
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Trusted Program List
Console settings

Web Reputation Service

Web reputation technology tracks the credibility of web domains accessed by endpoints.

Apex One (Mac) Security Agent sends queries to the Trend Micro Global Smart Scan Server for the following:

External agents
Agents that are unable to connect to the Smart Protection Server (standalone or integrated)
When the Send queries to Smart Protection Servers option is not selected

Data Collected	URL
Console Location	Apex Central™ as a Service > Policies > Policy Management > Apex One (Mac) > [new or existing policy] > Web Reputation Settings
Console settings	• Enable Web Reputation policy (External Agents) • Enable Web Reputation policy (Internal Agents)

Apex One (Mac) Cloud Console

Scan Now: Malware detection

Virus/Malware scanning checks files for known security risks.

Data Collected	File name File path
Console Location	SSO to Apex One (Mac) server Agents > Agent Management > Tasks > Scan Now
Console settings	Scan Now

Smart Feedback

Smart Feedback shares anonymous threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats.

Data Collected	URL File name File path Suspicious executable files
Console Location	SSO to Apex One™ (Mac) as a Service Administration > Smart Feedback
Console settings	Enable Trend Micro Smart Feedback (recommended)

Web Reputation Approved/Blocked URL List

Data Collected	URL
Console Location	SSO to Apex One™ (Mac) as a Service Agents > Global Agent Settings > Web Reputation
Console settings	Approved/Blocked URL List

Certified Safe Software Service

Certified Safe Software Service queries Trend Micro data centers to verify the safety of a program detected by Malware Behavior Blocking, Event Monitoring, Firewall, or antivirus scans.

Data Collected	File name Company
Console Location	SSO to Apex One™ (Mac) as a Service Agents > Global Agent Settings > Certified Safe Software Service
Console settings	Enable Certified Safe Software Service for antivirus scan

Standard Notifications

Apex One™ (Mac) server sends notifications to the specified recipients when a security risk is detected.

Data Collected	Email address
Console Location	SSO to Apex One™ (Mac) as a Service Notifications > Standard Notification (Email)
Console settings

Outbreak Notifications

Apex One™ (Mac) server sends notifications to the specified recipients when a security outbreak occurs.

Data Collected	Email address
Console Location	SSO to Apex One™ (Mac) as a Service Notifications > Outbreak Notification (Email)
Console settings

Was this article helpful?