Xcitium Enterprise Admin Guide - Configure Android Client Antivirus Settings

Introduction To Xcitium Enterprise - Endpoint Protection Platform
- Key Concepts
- Best Practices
- Login Into The Admin Console
- Upgrade To Full Version
The Admin Console
The Dashboards
CNAPP Dashboard
ROI Dashboard
Devices And Device Groups
- Manage Device Groups
- Manage Devices
- Bulk Enrollment Of Devices
  - Enroll Windows, Mac OS And Linux Devices By Installing The Communication Client
  - Enroll Android And IOS Devices Of AD Users
- Download And Install The Remote Control Tool
Cloud Workloads
Cloud Assets
Cloud Security
- View Vulnerabilities Findings
- Registry Scan
- CSPM Executive Dashboard
- Compliance Summary
- CWPP Dashboard
- App Behavior
- Manage Policies
- Remediation
- View Alerts
- Manage Triggers
- View Reports
Users And User Groups
- Manage Users
- Manage User Groups
- Configure Role Based Access Control For Users
Configuration Templates
- Create Configuration Profiles
- View And Manage Profiles
  - Export And Import Configuration Profiles
  - Clone A Profile
- Edit Configuration Profiles
- Manage Default Profiles
- Manage Alerts
  - Create A New Alert
  - Edit / Delete An Alert
- Manage Procedures
- Manage Monitors
  - Create Monitors And Add Them To Profiles
    - Monitors For Windows Devices
    - Monitors For Mac OS Devices
  - View And Edit Monitors
- Data Loss Prevention Rules
Security Systems
- View Alerts And Security Events
- Investigate Events
- Endpoint Security Status
- View And Manage Blocked Threats
- View And Manage Quarantined Items
- View Contained Threats
- View And Manage Autorun Items
- Manage File Trust Ratings On Windows Devices
  - File Ratings Explained
- View List Of File Verdicts
- View History Of External Device Connection Attempts
- Data Loss Prevention Scans
  - DLP Logs
  - DLP Quarantined Files
Network Management
- Create And Run Network Discovery Tasks
- Manage Profiles For Network SNMP Devices
- Manage Network Devices
  - Manage SNMP Devices
    - SNMP Device Details Interface
  - Discovered Devices
- Manage Network Monitors
Software Inventory
- View Applications Installed On Android And IOS Devices
  - Blacklist And Whitelist Applications
- Patch Management
  - Manage OS Patches On Windows Endpoints
  - Install 3rd Party Application Patches On Windows Endpoints
    - Xcitium Supported 3rd Party Applications
- View And Manage Applications Installed On Windows Devices
  - Uninstall A Windows Application From Selected Devices
  - Uninstall A Windows Application From All Devices
- Vulnerability Management
Management Settings
- Account Management
- License Management
Configure Xcitium Enterprise
- Email Notifications, Templates And Custom Variables
- Xcitium Enterprise Portal Configuration
- Dashboard Settings
- Cloud Security Settings
- Data Protection Templates
  - View And Manage Pattern Variables
  - View And Manage Keyword Groups
- View Version And Support Information
- Alert Notification Settings
Appendix 1a - Xcitium Services - IP Nos, Host Names And Port Details - EU Customers
Appendix 1b - Xcitium Services - IP Nos, Host Names And Port Details - US Customers
Appendix 2 - Pre-configured Profiles
Appendix 3 - Default Xcitium Security Policy Details
About Xcitium

Configure Android Client Antivirus Settings

The Android antivirus provides real-time protection against malware and malicious apps. You can also launch on-demand scans on Android devices from the Xcitium console.

The antivirus settings area lets you configure whether threats are automatically removed or handled manually.

Automatic Response - You have the choice to auto-uninstall or ignore the threat. If you choose 'Ignore' then the item will appear in the current malware list ('Security' > "Endpoint Security' > 'Antivirus' > 'Current Malware List').

Manual Control - All threats are ignored on the device. You can manage these ignored threats at 'Security' > "Endpoint Security' > 'Antivirus' > 'Current Malware List'.

Configure antivirus settings

Click 'Settings' > 'Settings' > 'Portal Set-Up' > 'Client Settings'

Click 'Android' > 'Antivirus'

The current antivirus settings are displayed.

Click the edit button at the top to modify settings.

Android Client Antivirus Settings - Table of Parameters
Parameter	Description
Virus Reaction	Choose the type of action taken if malware is discovered on the device. The options are: 1) Manual control - Discovered malware is ignored and its details are sent to Xcitium (current malware list and Android threat history). No alerts are shown on the device. You must enable 'Terminate Malware' in the Android profile if you also want stop the malware running. Click 'Assets' > 'Configuration Templates' > 'Profiles' > open your Android profile > Open or add the 'Antivirus' section. See 'Antivirus Settings' in Profiles for Android Devices for help on this. 2) Automatic response - Two options are available. Uninstall: Knox devices - Applications with viruses or infected files on the devices and from the SD card are deleted without any alert on the device. Non-Knox devices - An alert is shown to the user on the device for removal of malware. Infected files on the SD card are deleted without any alert. Ignore: No action is taken on malware files and details are sent to portal (current malware list and Android threat history). You can manage the threats in the current malware list screen.

Android Client Antivirus Settings - Table of Parameters

Parameter

Description

Virus Reaction

Choose the type of action taken if malware is discovered on the device. The options are:

1) Manual control - Discovered malware is ignored and its details are sent to Xcitium (current malware list and Android threat history). No alerts are shown on the device.

You must enable 'Terminate Malware' in the Android profile if you also want stop the malware running.

Click 'Assets' > 'Configuration Templates' > 'Profiles' > open your Android profile > Open or add the 'Antivirus' section.

See 'Antivirus Settings' in Profiles for Android Devices for help on this.

2) Automatic response - Two options are available.

Uninstall:

Knox devices - Applications with viruses or infected files on the devices and from the SD card are deleted without any alert on the device.

Non-Knox devices - An alert is shown to the user on the device for removal of malware. Infected files on the SD card are deleted without any alert.

Ignore:

No action is taken on malware files and details are sent to portal (current malware list and Android threat history). You can manage the threats in the current malware list screen.

Click 'Save' for your settings to take effect.

Xcitium Enterprise

Xcitium Enterprise Administrator Guide

English

Configure Android Client Antivirus Settings