Jump to content

Archived

This topic is now archived and is closed to further replies.

Sander de Cocq

Notification when user disables Endpoint Security modules

Recommended Posts

 

ESET Security Management Center (Server), Version 7.0 (7.0.577.0)
ESET Security Management Center (Web Console), Version 7.0 (7.0.429.0)
Microsoft Windows Server 2012 R2 Standard (64-bit), Version 6.3.9600 

Hello, our company policy requires that an email notification is sent when an end-user disables or pauses real time file protection, HIPS, Memory scanner, exploit blocker or ransomware shield. I've looked at the included alerts, could not find a match, and disabling the scanner is not shown as a Threat. Is it possible to create such an alert?  (ESET Endpoint Security 7.1.2045.5 and newer)

Share this post


Link to post
Share on other sites

There is a default dynamic group Problematic computers which is defined as:

image.png

That said, any machines that have a protection feature disabled will fall into this dynamic group.

Then in Notifications enable this one which you can customize, if needed:

image.png

image.png

Share this post


Link to post
Share on other sites

Thank you for your prompt reply, this looks like a good solution. I will try it out.

 

Share this post


Link to post
Share on other sites

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...