Threat Prevention with Jamf Protect - Jamf Protect Evaluation Guide

Advanced threat controls intervene when unsafe or malicious activity considered high-risk by Jamf Threat Labs is detected. Detected activity is blocked and reported to administrators for further investigation.

Tamper prevention forbids unauthorized modification, disabling, or deletion of the Jamf Protect application, system extension, and its critical files. This feature also protects against locally disabling tamper prevention protections.

Endpoint threat prevention monitors process execution to prevent known malware and threats on macOS. Endpoint threat prevention uses the Jamf Protect threat database to monitor computers for processes that match entries. When matches occur, Jamf Protect automatically blocks the matching process and quarantines the associated file.

Custom prevent lists allow you to block processes and quarantine files on computers based on file hashes and Apple-specific signing information.

Web protection detects and blocks inbound and outbound threats that occur during network activity with computers. Web protection is configured via policies in the Jamf Security Cloud portal.