Jump to content

Notification when user disables Endpoint Security modules


Sander de Cocq
 Share

Recommended Posts

 

ESET Security Management Center (Server), Version 7.0 (7.0.577.0)
ESET Security Management Center (Web Console), Version 7.0 (7.0.429.0)
Microsoft Windows Server 2012 R2 Standard (64-bit), Version 6.3.9600 

Hello, our company policy requires that an email notification is sent when an end-user disables or pauses real time file protection, HIPS, Memory scanner, exploit blocker or ransomware shield. I've looked at the included alerts, could not find a match, and disabling the scanner is not shown as a Threat. Is it possible to create such an alert?  (ESET Endpoint Security 7.1.2045.5 and newer)

Link to comment
Share on other sites

  • Administrators

There is a default dynamic group Problematic computers which is defined as:

image.png

That said, any machines that have a protection feature disabled will fall into this dynamic group.

Then in Notifications enable this one which you can customize, if needed:

image.png

image.png

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...