Internet Explorer Enhanced Protected Mode isn’t supported
Last Modified: 2023-01-06 17:11:31 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Internet Explorer Enhanced Protected Mode isn’t supported
Technical Articles ID:
KB76802
Last Modified: 2023-01-06 17:11:31 Etc/GMT EnvironmentEndpoint Security (ENS) Threat Prevention 10.x ScriptScan
ENS Web Control 10.x Microsoft Internet Explorer 10 and later SummaryInternet Explorer 10 (and later) offers a feature named Enhanced Protected Mode (EPM). EPM provides another layer of security by preventing add-ons from running. Typical add-ons are toolbars, extensions, and browser helper objects. Only add-ons made specifically for compatibility with EPM function with EPM enabled.
EPM provides more protection against malicious websites using 64-bit processes on 64-bit versions of Windows. For computers running Windows 8 and later, EPM also limits the locations Internet Explorer can read from in the registry and the file system. ENS Threat Prevention ScriptScan and ENS Web Control don’t support Internet Explorer in EPM, and don’t function with EPM enabled. In the Internet Explorer Metro version, you can't disable EPM unless you disable Protected Mode entirely. In the Internet Explorer Desktop version, EPM is disabled by default. If it’s enabled, you can disable this mode locally via Internet Options or using a Group Policy. NOTE: EPM is different from Protected Mode. ENS Threat Prevention ScriptScan and ENS Web Control function correctly in Protected Mode. SolutionENS Threat Prevention ScriptScan and ENS Web Control don’t support EPM. EPM must be disabled for ENS Threat Prevention ScriptScan and ENS Web Control to function in Internet Explorer.
We are evaluating compatibility with EPM. There’s no estimate for support for EPM. Disable EPM through Internet Explorer: NOTE: This procedure applies only to Internet Explorer Desktop.
A Group Policy allows you to apply policies to specific groups of computers. To disable EPM, use the standard policy Turn on Enhanced Protected Mode. When you disable this policy setting, EPM is disabled. Any zone that has Protected Mode enabled uses the version of Protected Mode introduced in Internet Explorer 7.
For details about Internet Explorer policies, see this Microsoft article on Group Policy settings. For instructions on using Group Policy Objects (GPOs), see this Microsoft article on GPOs. IMPORTANT: If you don’t configure this policy, users can enable or disable EPM from the Advanced tab of the Internet Options dialog box. Affected ProductsLanguages:This article is available in the following languages: |
|