Cynet's NextGen antivirus reduces the attack surfaces in your environment by protecting you from known malware and zero-day attacks. Cynet's NextGen antivirus is composed of these engines:Core antivirus: Identifies and prevents execution of malware with known signatures. Malware signatures are updated, at least, twice a day.CyAI: Engine based on machine learning. Operational in all Windows-based endpoints in which the core antivirus is turned on.Threat intelligence: The agent sends file attributes to the server for immediate detection and response. The Cynet server scans the file metadata for indications of known malware in the Cynet threat intelligence database and third party intelligence feeds.Cynet's NextGen antivirus monitors file creation. Cynet triggers an alert when a malicious file is saved on the endpoint, even if not executed (the alert is Infected File - File Dumped on Disk). It is not recommended to use an antivirus in addition to Cynet's NextGen antivirus, as this may cause performance issues. If you do decide to enable an antivirus in addition to Cynet antivirus, you must prevent the tools from identifying each other as malware. To add the appropriate exclusions to Cynet 360, navigate to Settings > Profiles > Exclusions. For a list of Cynet 360 paths and directories that must be excluded, click here.If a legitimate file keeps triggering AV alerts, consider whitelisting the file.Enabling NextGen AntivirusAntivirus settings are applied per Group and are located under EPP Advanced Setting. If EPP is turned on, AV is automatically turned on, in the same mode as EPP (Detect or Prevent). If EPP is set to Prevent, you can separately set Antivirus to Detect (you cannot set AV to Prevent if EPP is set to Detect).Antivirus modes:Detect: When a malicious file is executed, Cynet 360 triggers an alert.Prevent: When a malicious file is executed, Cynet 360 triggers an alert and renames the file to block its execution.You can undo the Rename action by selecting Undo File Remediation from the Actions menu*.*If you try undoing the remediation action and the AV alert is immediately triggered again or the action fails, you need to whitelist the alert before undoing the file remediation. After whitelisting the file, wait for the whitelisting to take affect, then undo the file remediation again.In Linux endpoints, Cynet NextGen AV requires additional components. Click here for details.