Frequently Asked Questions

Data collected will only be used for protection against security threats.

Access to information is limited to authorized parties (e.g. administrators of the platform).

S1 data is stored in the cloud within their software as a service (SaaS) service in Canada.

S1 data is stored for up to 30 days at the S1 cloud service and 90 days within our Security Information and Event Management (SIEM) environment.

Your unit has joined the pilot to enable advanced anti-virus protection for end users within the unit. As a unit member, you have been chosen to receive this critical security protection. This is one of the steps to protect individuals against security threats.

The University does not use S1 to watch an individual’s personal use of the University networks or devices. The University will not use this data to support investigations related to employee productivity, attendance/activity and any other general monitoring of behaviour not directly associated with security threat protection at the University.

Designated Information Security staff will interact with the data only if a security threat alert has been triggered. S1 uses artificial intelligence to analyze basic file data such as file name, size and file hashes to find potentially malicious files. Still, it does not analyze content data beyond threat detection. This is consistent with best practices to mitigate against constantly evolving cyber threats.

No. S1 is a SaaS Solution and always requires access to the internet. If a machine has a virus/malware, it may be placed in ‘quarantine’ mode depending on the policy applied against a particular set of machines.

The advice is to start with an advanced license first for managed endpoints. However, if the testing machine only deals with non-sensitive data, then a case can be made for the use of enhanced licenses.

Yes. Otherwise, it might interfere with the performance of the machine.

Yes. However, careful consideration needs to be given to how this would be paid for, deployed and supported by the different divisions. Another consideration might be privacy.

The project team will be looking at deploying EDR to some student computer labs, which run on Windows, Mac and Linux, each having its system administrator.

Not yet. This is part of the documentation provided by professional services (i.e., the vendor).

If it's UTORauthed, then yes, DUO is inherited.

It is web-based.

Yes, S1 supports VMware host server, but it would require a separate license.

You can register for the free S1 basic admin training that runs weekly:

1. S1 Part 1 welcome training – runs Tuesdays at 10 a.m.PST
2. S1 Part 2 welcome training – runs Thursdays at 10 a.m.PST

In addition to the operating systems listed below, SentinelOne also provides dedicated agents for K8s and NetApp.