Data Collection Disclosure - OfficeScan XG Service Pack 1

OfficeScan XG Service Pack 1 Data Collection Notice

- Updated:
- 13 Jun 2018
- Product/Version:
- OfficeScan XG
- Platform:
- Windows 10
- Windows 2003 32-Bit
- Windows 2003 64-Bit
- Windows 2008 32-Bit
- Windows 2008 64-Bit
- Windows 2012
- Windows 2012 Server R2
- Windows 2016
- Windows 7 32-Bit
- Windows 7 64-Bit
- Windows 8 32-Bit
- Windows 8 64-Bit
- Windows 8.1 32-Bit
- Windows 8.1 64-Bit

Smart Scan (File Reputation Services)

Smart Scan (File Reputation Services) checks the reputation of each file against an extensive in-the-cloud database.

Data collected	File hash Agent GUID Server GUID Agent IP address
Console location	Agents > Agent Management > Settings > Scan Settings > Scan Methods
Console settings	Smart Scan

Web Reputation Services

Web reputation technology tracks the credibility of the web domains accessed by protected endpoints.

Web Reputation Services: External Agents
Data collected	URL Agent IP address
Console location	Agents > Agent Management > Settings > Web Reputation Settings > External Agents (tab) > Enable Web Reputation on the following operation systems
Console settings	Windows desktop platforms Windows Server platforms

Web Reputation Services: Internal Agents
Data collected	URL Agent IP address
Console location	Agents > Agent Management > Settings > Web Reputation Settings > Internal Agents (tab) > Query Settings
Console settings	Send queries to Smart Protection Servers

Browser Exploit Prevention

Browser Exploit Prevention identifies the latest web browser exploits and prevents the exploits from being used to compromise the web browser.

Browser Exploit Prevention: External Agents
Data collected	Suspicious or malicious URLs HTTP header / HTML files from Suspicious or malicious URLs Browser information (installed extension name, path, csid, version)
Console location	Agents > Agent Management > Settings > Web Reputation Settings > External Agents (tab) > Browser Exploit Prevention
Console settings	Block pages containing malicious script

Browser Exploit Prevention: Internal Agents
Data collected	Suspicious or malicious URLs HTTP header / HTML files from Suspicious or malicious URLs Browser information (installed extension name, path, csid, version)
Console location	Agents > Agent Management > Settings > Web Reputation Settings > Internal Agents (tab) > Browser Exploit Prevention
Console settings	Block pages containing malicious script

Predictive Machine Learning

Predictive Machine Learning performs in-depth file analysis to detect emerging unknown security risks.

Data collected	URL File name File path File hash Digital signature signer Attachment file name Agent GUID Agent IP address
Console location	Agents > Agent Management > Settings > Predictive Machine Learning Settings
Console settings	Enable Predictive Machine Learning

Smart Feedback

Smart Feedback shares anonymous threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats.

Smart Feedback
Data collected	Peer IP address URL File name File path Hostname
Console location	Administration > Smart Protection > Smart Feedback
Console settings	Enable Trend Micro Smart Feedback (recommended)

Files collected using the File Feedback feature contain no user data and are submitted only for threat analysis.

Smart Feedback - File Feedback
Data collected	Peer IP address File name File path Suspicious executable files
Console location	Administration > Smart Protection > Smart Feedback > File Feedback
Console settings	Enable feedback of suspicious program files

Behavior Monitoring

Behavior Monitoring provides a necessary layer of additional threat protection from programs that exhibit malicious behavior.

Data collected	URL File name File path File hash Agent GUID Agent IP address
Console location	Agents > Agent Management > Settings > Behavior Monitoring Settings > Rules (tab) > Malware Behavior Blocking
Console settings	Enable Malware Behavior Blocking

Certified Safe Software Service

Certified Safe Software Service queries Trend Micro datacenters to verify the safety of a program detected by Malware Behavior Blocking, Event Monitoring, Firewall, or antivirus scans.

Data collected	File hash Agent IP address File name Company
Console location	Agents > Global Agent Settings > System (tab) > Certified Safe Software Service Settings
Console settings	Enable the Certified Safe Software Service for Behavior Monitoring, Firewall, and antivirus scans

Sample Submission

Sample Submission enables OfficeScan agents to detect and submit file objects that may contain previously unidentified threats to a Virtual Analyzer for further analysis.

Data collected	File hash Agent GUID Agent IP address
Console location	Agents > Agent Management > Settings > Sample Submission Settings
Console settings	Enable suspicious file submission to Virtual Analyzer

Need More Help?