Remediation Steps to Improve Protection Scores

Topics Discussed

You can use the information below to troubleshoot the issues displayed in the Protection screen.

Armor recommends that you troubleshoot these issues to:

  • Improve your Protection scores

  • Improve your overall Health scores

  • Increase the overall security of your environment

Review each step to troubleshoot your problem. If the first step does not resolve the issue, then continue to the second step until the issue has been resolved. As always, you can send a support ticket.

Logging


Armor Service

Issue

Remediation

Armor Service

Issue

Remediation

Logging

The filebeat logging agent is not installed.









 

Logging

The winlogbeat logging agent is not installed.

This section only applies to Windows users.



 







Click the following link to open a support ticket in AMP: https://amp.armor.com/support/tickets/new



Logging

Armor has not received a log in the past 4 hours.













Malware Protection


Armor Service

Issue

Remediation

Armor Service

Issue

Remediation

Malware Protection

Malware Protection has not provided a heartbeat in the past 4 hours.









 

Malware Protection

Malware Protection is not installed or configured.













Malware Protection

Reboot is required for Malware Protection.







File Integrity Monitoring (FIM)


Armor Service

Issue

Remediation

Armor Service

Issue

Remediation

File Integrity Monitoring (FIM)

FIM has not provided a heartbeat in the past 4 hours.











File Integrity Monitoring (FIM)

FIM is installed but has not been configured.













File Integrity Monitoring (FIM)

FIM is not installed.











Intrusion Detection System


Armor Service

Issue

Remediation

Armor Service

Issue

Remediation

IDS

IDS has not provided a heartbeat in the past 4 hours.

 

 

 





IDS

IDS is installed but has not been configured.

 

 





 

IDS

IDS is not installed or enabled.











Vulnerability Scanning


To remediate Vulnerability Scanning issues, please refer to this documentation.