This document explains how to enable and configure Acronis Advanced Endpoint Detection and Response (EDR), including agent installation, protection plans, malware protection, antivirus scheduling, and security exclusions.

1. Enable Acronis Advanced EDR

Procedure

1. Log in to the Acronis Cyber Protect Cloud console.
2. Navigate to Protection Plans.
3. Create a new protection plan or edit an existing one.
4. Enable the Advanced EDR protection module.
5. Configure the required security settings.
6. Save the protection plan.

Note: Ensure the appropriate Advanced EDR license is assigned before enabling this feature.

2. Assign an EDR Protection Plan

Procedure

1. Navigate to Devices.
2. Select one or more endpoints.
3. Click Assign Protection Plan.
4. Select the required EDR Protection Plan.
5. Click Apply.
6. The selected devices will receive the configured EDR policies.

3. Install the EDR Agent

Procedure

1. Log in to the Acronis Cyber Protect Cloud console.
2. Navigate to Devices.
3. Click Add Device.
4. Download the appropriate Windows or Linux agent installer.
5. Run the installer on the target endpoint.
6. Complete the installation wizard.
7. The endpoint will automatically register with the Acronis console.

Note: The EDR functionality is included with the Acronis Cyber Protect Agent when licensed and enabled.

4. Verify EDR Agent Status

Procedure

1. Navigate to Devices.
2. Select the required endpoint.
3. Open the Protection or Security tab.
4. Verify the following:
   • Agent Status
   • EDR Status
   • Protection Status
   • Last Communication Time
5. Confirm the endpoint shows Online and Protected.

5. Update the EDR Agent

Procedure

1. Navigate to Devices.
2. Select the endpoint.
3. Click Update Agent if a newer version is available.
4. Confirm the update.
5. Wait for the update to complete.
6. Verify the agent status returns to Online.

6. Reinstall the EDR Agent

Procedure

1. Uninstall the existing Acronis Agent from the endpoint.
2. Restart the system if required.
3. Download the latest agent from the Acronis console.
4. Install the agent using the latest installer.
5. Confirm the endpoint appears in the console with EDR enabled.

7. Configure Malware Protection

Procedure

1. Open the required Protection Plan.
2. Navigate to Malware Protection.
3. Enable Real-Time Malware Protection.
4. Configure the required detection actions:
   • Detect
   • Quarantine
   • Block
   • Delete
5. Save the protection plan.

Note: Real-time malware protection continuously monitors files and processes for malicious activity.

8. Configure Active Protection

Procedure

1. Open the required Protection Plan.
2. Navigate to Active Protection.
3. Enable Active Protection.
4. Configure the desired protection settings for:
   • Ransomware Protection
   • Behavioral Detection
   • Process Monitoring
5. Save the protection plan.

Note: Active Protection helps detect and prevent ransomware, unauthorized encryption, and suspicious process behavior.

9. Configure Antivirus Scan Schedule

Procedure

1. Open the required Protection Plan.
2. Navigate to Antivirus.
3. Configure the scan type:
   • Quick Scan
   • Full Scan
   • Custom Scan
4. Set the scan schedule:
   • Daily
   • Weekly
   • Monthly
5. Specify the scan time.
6. Save the protection plan.

10. Configure Security Exclusions

Procedure

1. Open the required Protection Plan.
2. Navigate to Security Exclusions.
3. Add the required exclusions, such as:
   • Files
   • Folders
   • Processes
   • File Extensions
4. Save the protection plan.

Note: Configure exclusions only for trusted applications or directories to avoid reducing endpoint protection.