Hi,
you can use the "enable ransomware protection" report in the command center. this report isn't available by default, you also need to get it in the commvault store.
https://cloud.commvault.com/webconsole/softwarestore/store.do#!/147/0/15365
i used it to enable ransomware protection on all my media agent in one shot.
regards,