Low Memory Mode w. Endpoint Security E87.30 Windows Clients

[G_W_Albrecht]

The newest Endpoint Security E87.30 Windows Clients have a new feature:

Behavioral Guard
EPS-50725	NEW: Added Low Memory Mode, which reduces memory consumption. Note that this mode may change the security level because it is based on a smaller amount of signatures.

We can enable it here:

We can use this new feature when configuring a package for export:

Now we can enable the Minimize Package size option and select the Anti-Malware Settings signature profile footprint:

I would think that Minimum signatures means only most important signatures, but when selecting none, at least part of Anti-Malware blade gets disabled.

Is there any detailed information available, e.g.:

Which kind of signatures are included ?

Which kind of signatures are not included ?

Is this Behavioral Guard or AV or what ?

@Chris_Atkinson any internal hints 😉

[G_W_Albrecht]

Any idea, @BarYassure ?

[MikeB]

Hi @G_W_Albrecht.

If I'm not mistaken, the option to include the anti-malware signatures when configuring a package for export has been available for some time and I would understand that it refers to whether or not the installer package includes the signatures at deployment time. This makes the installer more or less large in size. If configured without signatures, at the end of the installation the agent downloads them, while if configured complete, the agent has much less to update.

I'm not sure if this is related to the new "low memory mode" in Behavioral Guard.

[G_W_Albrecht]

I am also not sure - that is the reason of my post 😎

> Note that this mode may change the security level because it is based on a smaller amount of signatures.

Does not sound like all will be downloaded. The TinyClient Package is used to make the installer less large in size and download the rest in parts.

[anstelios]

"Note that this mode may change the security level because it is based on a smaller amount of signatures."

This  warning is about "low memory mode" as shown in Behavioral Protection advanced settings and it's not related to export package options.
"Included Signatures" in "Minimize package" has been available for a long time now and it should reduce the the size of the exported package and not the security effectiveness of the client since all signatures would be downloaded after installation.

A verification of the above from a CP representative would be appreciated.

Also we would like to know what kind of signatures are disabled in low memory mode..