MENU
By default, vDefend Malware Detection and Prevention blocks which of the following file types?
In VMware vDefend Malware Prevention, files are categorized based on their analysis results into distinct threat levels (e.g., Benign, Suspicious, Malicious). By default, the system is designed to balance security with business continuity to avoid disrupting legitimate network traffic.
Therefore, by default, the prevention engine will strictly block files that are definitively categorized as Malicious (meaning they have a known bad signature/hash or have explicitly exhibited malicious behavior in the dynamic sandbox). Files categorized as 'Suspicious' are allowed through but trigger high-priority alerts in the NDR console for an analyst to review. Blocking 'Suspicious' files by default could result in too many false positives and disrupt normal business operations.
=========================