Data Sentinel Settings

From the NeuShield Portal, you can change settings for the clients in your account. Changing these settings will affect all clients assigned to the selected group.

At the top of the screen, you will see the Data Sentinel Settings header. If you have groups configured, the currently selected group will be displayed next to the header. The group is also configurable, meaning you can switch groups by clicking on the group name. The selected group determines which clients the settings will apply to.

Data Sentinel Settings

Note: The tab names and available settings in your account may differ from those shown above.

Auto Update Settings

By default, NeuShield Data Sentinel will automatically update to the latest available build. However, automatic updates can be disabled from the Data Sentinel Settings panel in the NeuShield Portal.

Anti-Wiper & Boot Sector Protection

By default, Anti-Wiper and Boot Sector Protection can be modified by the end user. However, if you want to control these options from the NeuShield Portal, you can set them to Enabled or Disabled. When one of these options is set from the NeuShield Portal, the portal setting will override the corresponding user setting on the client.

Database Protection (Datacenter Edition Only)

Database Protection is only available with the Datacenter Edition. It is not recommended to attempt to protect a database using the Home or Business Editions.

Database Protection supports Microsoft SQL Server 2012 and newer. The Database Guardian option prevents unapproved applications from modifying SQL Server data and binary files, while the Exfiltration Protection option hides SQL Server data and binary files from unapproved applications, preventing those applications from accessing or stealing the protected data.

Check Malicious File Modification

This setting determines when NeuShield Data Sentinel checks protected files for malicious modification, such as corruption or encryption caused by ransomware.

The check can be performed continually, allowing NeuShield to detect malicious changes after each file modification. Alternatively, it can be configured to check for malicious file changes only before an overlay commit.

Choosing the latter option can reduce system activity, but alerts may be delayed until the next malicious file modification check is performed.

Maximum Number of Data Engrams

Data Engrams are backup copies or revisions of protected files that allow previous versions of files to be recovered.

You can configure the maximum number of Data Engrams that NeuShield Data Sentinel will create for each file. Changing this setting will not remove existing Data Engrams.

For example, if a file already has 10 Data Engrams and you change the maximum to 5, the existing 10 Data Engrams will not be deleted. However, NeuShield will not create additional Data Engrams for that file until the number of existing Data Engrams is below the configured maximum.

This setting can be set to 0 to prevent NeuShield Data Sentinel from creating Data Engrams.

Maximum Data Engram File Size

You can specify the maximum file size for which Data Engrams will be created.

For example, if this setting is configured to 512 MB, NeuShield Data Sentinel will not create backup copies or revisions for files larger than 512 MB.

Files larger than this limit can still be protected by NeuShield Data Sentinel; however, Data Engrams will not be created for those files.

Maximum Protected File Size

By default, NeuShield Data Sentinel protects files up to 2 GB in size. This setting can be increased to allow files up to 512 GB to be protected.

Files can still be protected even when they are too large for Data Engrams to be created. The Maximum Protected File Size setting controls whether the file itself can be protected, while Maximum Data Engram File Size controls whether revisions of the file can be created.

Overlay Commit Interval

NeuShield Data Sentinel periodically commits data from the overlay to disk. This allows changes made to protected files to be permanently saved.

By default, the overlay is committed every 24 hours, excluding weekends. You can change the frequency of these commits to suit your environment.

Setting a shorter commit interval can reduce the amount of data that could be lost when reverting a folder. However, it also provides less time to respond to a ransomware attack before malicious changes are permanently committed.

Setting a longer commit interval can provide more time to respond to a ransomware attack and revert malicious changes, but it also increases the amount of legitimate data that could be lost if a folder needs to be reverted.

Protected Cloud Drives and User Folders

NeuShield Data Sentinel automatically protects the default Windows user folders, including Documents, Desktop, Contacts, Music, Pictures, Saved Games, Videos, and 3D Objects.

This protection is provided for the user profiles on the system, and these default protected folders cannot be removed. However, protection for these folders can be disabled from the Protected Cloud Drives and User Folders page.

Protected Custom Folders

In addition to the default protected user folders, you can add custom folders to NeuShield Data Sentinel protection.

Custom folders can be added or removed from the Protected Custom Folders page. This allows you to protect folders containing important business or application data that are not included among the default protected user folders.

User Control Settings

The User Control Settings section provides two primary functions: controlling the product uninstall process and controlling which NeuShield Data Sentinel functions are available to users on the endpoint.

For the product uninstall process, there are three options:

  • No Password or CAPTCHA Verification — No verification is required to uninstall NeuShield. This option is not recommended because it provides the least protection against unauthorized removal of the product.
  • Uninstall CAPTCHA Verification — A CAPTCHA must be completed before NeuShield can be uninstalled. This is the default option. The CAPTCHA cannot be displayed through Remote Desktop or some other remote-control software.
  • Uninstall Password — A password must be entered before NeuShield can be uninstalled. This is the recommended option. When using an uninstall password, we recommend using a unique password that is not used for any other purpose.

You can also use the User Control Settings to restrict the functions available to users on the endpoint. For example, you may want to hide the notification tray icon or prevent users from changing NeuShield settings.

When a client is set to Restricted mode, the user cannot change NeuShield settings, add or remove protected folders, revert folders, or run One-Click Restore.

Individual clients can be temporarily changed to Unrestricted mode from the My Protected Devices panel. This can be useful when an administrator needs to perform maintenance or make changes directly on an endpoint.

Advanced Settings

By default, NeuShield Data Sentinel automatically detects and uses the proxy server configured by Windows. In some environments, however, you may need to configure NeuShield to use a specific proxy server.

The Advanced Settings section allows you to specify a proxy server for NeuShield Data Sentinel to use when communicating with the NeuShield service. This can be useful in environments where Internet access is required to pass through a specific proxy server.

If your network does not require a specific proxy configuration, the default automatic proxy detection should normally be used.