Get the PDF

Memory protection

The Agent will scan and monitor running processes to protect devices from malware that attempts to take advantage of software vulnerabilities that exploit running processes or executes from within memory space. It is recommended that you block all types of memory violations.

For descriptions of the different violation, process, and escalation types, see Memory Protection Violation Types.

Enabling memory protection may cause errors if there is another application that also monitors running processes. You should disable the other application’s memory protection before you enable it in

CylanceON-PREM

. If that is not possible, then leave memory protection disabled in your

CylanceON-PREM

policies.

Memory Protection Setting	Description
Alert	The agent will record the violation and report the incident to the console.
Block	If an application attempts to call a memory violation process, the agent will block the process call. The application that made the call is allowed to continue to run.
Ignore	The agent will not take any action against identified memory violations.
Terminate	If an application attempts to call a memory violation process, the agent will block the process call and will also terminate the application that made the call.

Section:

Policies