The enable_prevent_known key indicates whether exploits should be blocked by exploit prevention. Valid values are true (block exploits) or false (do not block exploits). The default is false.
If the enable_prevent_known key value is true, set the following key values to true:
Change this setting using one of the following methods:
Web UI (see ).
API custom configuration channels (see Using API Custom Configuration Channels).
Manually on individual endpoints using a text editor (see Modifying the Configuration File for a Single Endpoint).