Integrity Monitoring collects system information to define a baseline when the feature is enabled. The baseline provides a reference that is used later in the lifecycle of the workload. All subsequent changes will be compared against the baseline and may result in the generation of security events.
Currently in the product today we expose the ability to see the complete baseline in the web administration interface through the 'view baseline' button.
As baselines have grown larger, and workloads have become more dynamic, the ability to support the feature to 'view baseline' in the web administration console has become increasingly challenging.
We are committed to evolving the design of Integrity Monitoring to meet the performance and operational needs of our customers.
The first step in this process is to remove the 'view baseline' capability from the web administration interface in Cloud One Workload Security. Through discussions with our customers it was determined that in its current form, this was not delivering the value to offset the performance and operational overhead required to maintain this data.
This change does not impact the protection you receive from Integrity Monitoring. In addition, all security events related to integrity monitoring and forwarding these events (through SNS and syslog) are unaffected by this change.
Please be reassured that our team never takes any decision to remove functionality lightly. We used both in product data, as well as discussions with our customers, to ultimately come to a decision that we believe is in the best interest of our customers.
Our team is committed to helping you secure your workloads. If you have any feedback on this change, please contact Trend Micro Support. We'd love to hear from you.