PodG 0 Posted March 8, 2022 Share Posted March 8, 2022 (edited) Hi, Is there a way to disable the AV on Linux EndPoint on a Linux end user PC via PROTECT? I want to be able to disable and then re-enable later on on a specific end user device. Thanks in advance Edited March 8, 2022 by PodG Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 5,074 Posted March 8, 2022 Administrators Solution Share Posted March 8, 2022 You can disable real-time protection via a policy. However, to re-enable it you will need to unassign it from the client. PodG 1 Link to comment Share on other sites More sharing options...
PodG 0 Posted March 8, 2022 Author Share Posted March 8, 2022 Just to clarify, to renable it can I just re-assign the device back to a policy that has RealTime protection enabled? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted March 8, 2022 Administrators Share Posted March 8, 2022 Correct. You won't be able to change the setting directly on a client as long as it is locked by a policy. Link to comment Share on other sites More sharing options...
PodG 0 Posted April 14, 2022 Author Share Posted April 14, 2022 Hi Marcos, is there a way to disable real time protection via the device on which the AV is running rather than via a policy? Reason for asking is that i will have instances whereby a laptop cannot connect to the policy server for a few days and I need to disable the AV on it temporarily directly via that laptop rather than via policy. I looked for the service on the laptop via systemctl but couldn't see the relevant service etc to disable. Is this possible? Thanks Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted April 14, 2022 Administrators Share Posted April 14, 2022 I recall it's possible only on Windows by enabling the Override mode: Link to comment Share on other sites More sharing options...
Recommended Posts