FEP Protected Endpoints with Real-time Protection Disabled or Windows Firewall Off Group Discovery

Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup.Discovery (Discovery)

Element properties:

TargetMicrosoft.FEP.ProtectedServersWithRTPorFirewallOffGroup
EnabledTrue
RemotableFalse

Object Discovery Details:

Discovered relationships and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
GroupPopulationDataSource DataSource Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup.DS Default

Source Code:

<Discovery ID="Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup.Discovery" Enabled="true" Target="FEPLibrary!Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup" ConfirmDelivery="false" Remotable="true" Priority="Normal">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryRelationship TypeID="SCInstanceGroup!Microsoft.SystemCenter.InstanceGroupContainsEntities"/>
</DiscoveryTypes>
<DataSource ID="GroupPopulationDataSource" TypeID="FEPLibrary!Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup.DS">
<GroupInstanceId>$MPElement[Name="FEPLibrary!Microsoft.FEP.ProtectedServersWithRTPorFirewallOffGroup"]$</GroupInstanceId>
</DataSource>
</Discovery>