Integrity Monitoring Events support the Auto-Tag Rules feature based on the Trusted Common Baseline.
This feature utilizes baselines in Workload Security. As baselines have grown larger and workloads have become more dynamic, the ability to support this feature has become increasingly challenging. Through discussions with customers, it was determined that this was not delivering the value to offset the performance and operational overhead required to maintain this data.
Thus, the Trusted Common Baseline function has been removed along with the View Baseline button, as explained in this article.
Trend Micro is committed to evolving the design of Integrity Monitoring to meet the performance and operational needs of our customers. This is one of the changes to help us optimize functionality and improve product performance.
This change does not impact the protection you receive from Integrity Monitoring. Additionally, all security events related to integrity monitoring and forwarding of these events (through SNS and syslog) are unaffected by this change.
Please be reassured that our team never takes any decision to remove functionality lightly. We used both in-product data, as well as discussions with our customers, to ultimately come to a decision that we believe is in the best interest of our customers.
We are committed to helping you secure your workloads. If you have any feedback on this change, please contact Trend Micro Technical Support. We'd love to hear from you.
