ESMCAgentInstaller.bat blocked by Eset ransomware policy

[B van der Woude 0]

When upgrading to Eset v7 the Agent installer ESMCAgentinstaller.bat is blocked by our Eset ransomware policy . It blocks the wscript.exe from executing.

How can we adjust the Eset ransomware policy so it only allows the ESMCageninstaller to install the latest Eset agent version.

Thanks in advance,

 

[MichalJ 434]

First of all, when you have your agent already installed (I assume you are on 6.5), the recommended upgrade path would be to use the component upgrade task, to deploy newer version of agents (after you have upgraded the server to V7, this will be possible, you just need to target the task to the machines you are willing to upgrade).  I can´t comment to anti-ransomware policy, I would recommend to contact ESET NL support for advice.

[B van der Woude 0]

Thank you for youre answer,

i need the ESMCageninstaller on some clients. 

I resolved this by adding a new firewal rule in the Eset anti-ransomware policy

allow c:\windows\system32\wscript.exe to the Eset ip numbers (repository)