> For the complete documentation index, see [llms.txt](https://docs.guardware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.guardware.com/documentation/insight/policies/advanced-settings.md). # Advanced Settings Advanced Settings define the global monitoring parameters applied across audit reports and device policies in GuardWare INSIGHT. They function as the central control point for how monitoring is configured and enforced across the organisation. These settings determine how INSIGHT operates on end-user devices, including the methods used to monitor the movement of sensitive data, the applications, URLs, and file extensions that are included or excluded from monitoring, and the configuration of communication between devices and the server. ## Reference Table The table below provides an overview of every Advanced Setting and what it does.

Section	What it does
Environment Settings	Controls the intervals, durations, timeouts, and bandwidth settings for uploading reports and downloading policies and commands.
Applications Monitored at Network Level	Lists applications monitored for sensitive data uploads at the network level.
IP Addresses Not Monitored at Network Level	Lists IP addresses that are not monitored for sensitive data.
Websites Monitored at Network Level	Lists certificate common names for which SSL traffic is, or is not, monitored.
Websites Monitored by Chromium Extensions	Lists URLs for which traffic is, or is not, monitored by Chromium Extensions.
Applications Monitored at File System Level	Lists applications monitored for sensitive data uploads at the file system level.
Applications Excluded from Keystroke Monitoring	Lists applications where keystrokes are not monitored for sensitive data.
Websites Excluded from Keystroke Monitoring	Lists websites where keystrokes are not monitored for sensitive data.
Applications Excluded from Copy/Paste Monitoring	Lists applications where copy/paste activity is not monitored for sensitive data.
Websites Excluded from Copy/Paste Monitoring	Lists websites where copy/paste activity is not monitored for sensitive data.
File Extensions Monitored at File System Level	Lists file extensions that are, or are not, monitored at the file system level.
Websites with End-to-End Encryption	Lists websites with end-to-end encryption.

## Create an Advanced Setting Before configuring any monitoring parameters, an Advanced Setting policy must be created first. Once created, it starts in an Inactive state and must be configured before it can be activated and applied to devices.

1. Navigate to **INSIGHT** > **Advanced Settings**. 2. Click **+ New Advanced Setting**. {% stepper %} {% step %} ### Configure Policy Info 3. In the **Policy Info** tab, fill in the following fields and click **Next**:

1. **Copy Settings From (Optional):** Select an existing Advanced Setting to copy its configuration into this new one. Useful for duplicating a baseline policy instead of starting from scratch. 2. **Setting Name:** Enter a clear, identifiable name for the setting. 3. **Description:** Briefly describe what this setting is for, who it applies to, or how it differs from other settings. 4. **Set as Default Setting (Optional):** Marks this as the organisation-wide default. Only one default setting can be active at a time; it is automatically assigned to all newly created users and can be duplicated to create policy variations from a common baseline. {% endstep %} {% step %} ### Configure Settings Once created, the **Advanced Setting** starts in an **Inactive** state. Configure the required settings, then activate when ready to apply to devices. Each setting can be enabled or disabled. Disabling a setting reverts it to its default state, disabling the associated functionality.

Environment Settings

Controls the intervals, durations, timeouts, and bandwidth settings for uploading reports and downloading policies and commands.

Setting	Default	Description	When to Change
Client Responsiveness	Normal Operation	Determines how frequently agents download commands and settings and upload reports. Very Responsive, Responsive, and Normal Operation correspond to intervals of 1 minute, 5 minutes, and 15 minutes respectively.	Increase responsiveness if near-real-time policy enforcement is required. Be aware that shorter intervals increase network and system overhead.
Enable Chromium Extensions	Disabled	An alternative approach to monitoring browsers at the network level.	Enable if network-level browser monitoring is insufficient or unavailable in the environment.
Incognito / Private Browsing	Incognito / In Private mode browsing allowed	Controls whether users can open private browsing windows. Enable Enable Chromium Extensions to access this setting. Chromium Extensions cannot be forced to load in private windows, except in Microsoft Edge.	Block private browsing to prevent unmonitored activity. Allow it without monitoring only where appropriate. Select the Microsoft Edge option to allow and monitor Edge private windows while blocking private browsing in other browsers. Use network monitoring when users need private browsing in browsers other than Edge.
File System Level Monitoring	Enabled	Uses a file system level driver to monitor uploads through changes in the network information associated with files.	Disable if file system-level monitoring is not required or conflicts with existing endpoint software.
Passive Monitoring of File Uploads to Cloud Drives	Disabled	An alternative approach to monitoring file uploads to cloud drives at the file system level.	Enable if file system-level monitoring does not adequately capture cloud drive upload activity.
Network Level Monitoring	WFP	WFP and LSP are Windows networking technologies used to inspect network traffic.	Switch to LSP if WFP is incompatible with the environment or conflicts with other network drivers.
USB Monitoring	Enabled	Monitors insertions of, and file transfers to, USB devices.	Disable only if USB monitoring is managed by a separate solution or is not required in the environment.
GuardWare File Protection	Enabled	Prevents end users from editing or deleting files within the GuardWare Program Files and Program Data folders.	Disable temporarily for maintenance or troubleshooting only.
GuardWare Process Protection	Enabled	Prevents end users from terminating the main GuardWare processes.	Disable temporarily for maintenance or troubleshooting only.

Applications Monitored at Network Level

List of applications that are monitored for sensitive data uploads at the network level. The proxy can only monitor applications that are explicitly on this list. If an application is not selected, its traffic will not be captured.

1. Click **+ Add Setting** to open the configuration window. 2. A default set of applications is preselected for monitoring. To add more, use the search field to find the application and select the checkbox next to it. 3. If the application does not appear in the list, enter the executable name (e.g., `chrome.exe`) in the **Add Application** field and click **Add Application**. 4. Once added, select the checkbox next to it to include it in monitoring.

IP Addresses Not Monitored at Network Level

List of IP addresses that are not monitored for sensitive data. The list shows excluded IP addresses used by internal applications that are considered secure and do not need monitoring for the uploading of sensitive data.

1. Click **+ Add Setting** to open the configuration window. 2. Enter the IP address in the **Add IP** field and click **Add IP.** 3. Confirm the IP address appears in the list and close the window

Websites Monitored at Network Level

List of SSL certificate common names included in or excluded from network-level monitoring.

1. Click **+ Add Setting** to open the configuration window. 2. Select **Include** to monitor only listed websites. Select **Exclude** to monitor every website except those listed. 3. Search for and select a website, or enter its certificate common name and click **Add Website**. 4. Confirm the website appears in the list.

Websites Monitored by Chromium Extensions

List of URLs included in or excluded from monitoring by Chromium Extensions. 1. Click **+ Add Setting** to open the configuration window. 2. Select **Include** to monitor only listed URLs. Select **Exclude** to monitor every URL except those listed. 3. Search for and select a website, or enter its URL and click **Add Website**. 4. Confirm the website appears in the list.

Applications Excluded from Keystroke Monitoring

List of applications where keystrokes are not monitored for sensitive data. 1. Click **+ Add Setting** to open the configuration window. 2. Search for an application and select its checkbox to include it. 3. To remove an application, click **X** beside it in the **Selected Applications** list.

Websites Excluded from Keystroke Monitoring

List of websites where keystrokes are not monitored for sensitive data. 1. Click **+ Add Setting** to open the configuration window. 2. Search for and select a website. Alternatively, enter its URL and click **Add Website**. 3. To remove a website, click **X** beside it in the **Selected Websites** list.

Applications Excluded from Copy/Paste Monitoring

List of applications where copy/paste activity is not monitored for sensitive data. 1. Click **+ Add Setting** to open the configuration window. 2. Search for an application and select its checkbox to include it. 3. To remove an application, click **X** beside it in the **Selected Applications** list.

Websites Excluded from Copy/Paste Monitoring

List of websites where copy/paste activity is not monitored for sensitive data. 1. Click **+ Add Setting** to open the configuration window. 2. Search for and select a website. Alternatively, enter its URL and click **Add Website**. 3. To remove a website, click **X** beside it in **Selected Websites**.

File Extensions Monitored at File System Level

List of file extensions included in or excluded from file system-level sensitive data upload monitoring.

1. Click **+ Add Setting** to open the configuration window. 2. Select **Include** to monitor only listed extensions. Select **Exclude** to monitor every extension except those listed. 3. Enter the file extension in the **Add Extension** field (e.g., `pdf`, `xlsx`, `zip`) and click **Add**. 4. Confirm the extension appears in the list.

Applications Monitored at File System Level

List of applications that are monitored for sensitive data uploads at the file system level.

1. Click **+ Add Setting** to open the configuration window. 2. A default set of applications is preselected for monitoring. To add more, select the checkbox next to the application in the list. 3. If the application does not appear in the list, enter the executable name (e.g., `chrome.exe`) in the **Add Application** field and click **Add Application**. 4. Once added, select the checkbox next to it to include it in monitoring.

Websites with End-to-End Encryption

List of websites with end-to-end encryption monitoring. For websites implementing end-to-end encryption, it is not possible to intercept file uploads using network monitoring alone. Where end-to-end encrypted websites are permitted, and there is a concern that files containing sensitive data may be uploaded, both file system monitoring (file paths and contents) and network monitoring (destinations) are required in order to produce reports containing URL and file path information for the uploaded sensitive data.

1. Click **+ Add Setting** to open the configuration window. 2. A default set of websites is preselected. To add more, enter the website in the input field using the format `URL#Title_Substring` (e.g., `whatsapp.com#whatsapp`) and click **Add**. 3. To remove a website, click **X** next to the entry. 4. Close the window.

{% endstep %} {% step %} ### Review & Save 1. Scroll to the top of the page and click **Review & Save**. A summary of all configured settings will appear in the side panel.

2. Review the configurations. To make any changes, close the panel, update the relevant settings, and click **Review & Save** again.

3. Once satisfied, click **Save** to apply the configuration. {% endstep %} {% endstepper %} ## Assign Advanced Settings to Devices After creating an Advanced Setting, it can be assigned to devices from the Advanced Settings list. Devices assigned to a deleted setting automatically revert to the default setting (if it exists), which cannot itself be deleted. 1. Navigate to **INSIGHT** > **Advanced Settings.** 2. Click **Assign Devices** next to the setting you want to assign to a device.

3. Select devices to assign the setting to, or deselect them to remove the setting. 4. Click **Add** to apply changes. {% hint style="info" %} * A device can have only one advanced setting assigned at a time. * Multiple devices can be assigned to an advanced setting. * When a new advanced setting is assigned to a device, the existing advanced setting is automatically removed and replaced. {% endhint %} ## Edit an Advanced Setting 1. Navigate to **INSIGHT** > **Advanced Settings.** 2. Click **Edit** next to the relevant setting.

3. The process follows the same steps as [**creating a new Advanced Setting**](#create-an-advanced-setting). Update the required fields and settings. 4. Click **Review & Save** to review the changes. 5. Click **Update** to confirm changes. ## Delete an Advanced Setting 1. Navigate to **INSIGHT** > **Advanced Settings**. 2. Click **Delete** next to the relevant setting.

3. Click **Yes, Delete it!** to confirm. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.guardware.com/documentation/insight/policies/advanced-settings.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.