Chanklish 1 Posted January 7, 2023 Posted January 7, 2023 hello how to disable eset endpoint from the protect server ? thank you
Administrators Marcos 5,733 Posted January 7, 2023 Administrators Posted January 7, 2023 Please refer to https://help.eset.com/ees/10/en-US/idh_config_ecmd.html.
Chanklish 1 Posted January 7, 2023 Author Posted January 7, 2023 (edited) 13 minutes ago, Marcos said: Please refer to https://help.eset.com/ees/10/en-US/idh_config_ecmd.html. in my protect servers i can see the hundreds of computers i have .. i want to pause all protection on a specific computer from the ERA - not by commands - how ? Edited January 7, 2023 by Chanklish
Administrators Marcos 5,733 Posted January 7, 2023 Administrators Posted January 7, 2023 As per the help: List of ecmd commands Individual security features can be enabled and temporarily disabled with the ESET PROTECT Client Task Run command. The commands do not override policy settings and any paused settings will revert back to its original state after the command has executed or after a device reboot.
Chanklish 1 Posted January 7, 2023 Author Posted January 7, 2023 6 minutes ago, Marcos said: As per the help: List of ecmd commands Individual security features can be enabled and temporarily disabled with the ESET PROTECT Client Task Run command. The commands do not override policy settings and any paused settings will revert back to its original state after the command has executed or after a device reboot. i repeat : i want to disable all protection on a specific computer using GUI
Administrators Marcos 5,733 Posted January 7, 2023 Administrators Posted January 7, 2023 You will need to run the following commands via the Run command task, depending on what features you want to disable. There's no single setting in gui that would disable all protection modules and features either. Security Feature Temporary Pause command Enable Command Real-time file system protection ecmd /setfeature onaccess pause ecmd /setfeature onaccess enable Document protection ecmd /setfeature document pause ecmd /setfeature document enable Device control ecmd /setfeature devcontrol pause ecmd /setfeature devcontrol enable Presentation mode ecmd /setfeature presentation pause ecmd /setfeature presentation enable Anti-Stealth technology ecmd /setfeature antistealth pause ecmd /setfeature antistealth enable Personal firewall ecmd /setfeature firewall pause ecmd /setfeature firewall enable Network attack protection (IDS) ecmd /setfeature ids pause ecmd /setfeature ids enable Botnet protection ecmd /setfeature botnet pause ecmd /setfeature botnet enable Web Control ecmd /setfeature webcontrol pause ecmd /setfeature webcontrol enable Web access protection ecmd /setfeature webaccess pause ecmd /setfeature webaccess enable Email client protection ecmd /setfeature email pause ecmd /setfeature email enable Antispam protection ecmd /setfeature antispam pause ecmd /setfeature antispam enable Anti-Phishing protection ecmd /setfeature antiphishing pause ecmd /setfeature antiphishing enable
Chanklish 1 Posted January 7, 2023 Author Posted January 7, 2023 so each time i want to pause protection for a computer i have to type 10 commands ? even cheap endpoint solutions has better remote control than ESET ! VERY BAD
Administrators Marcos 5,733 Posted January 7, 2023 Administrators Posted January 7, 2023 Please elaborate more on why you need to often pause the real-time protection and firewall together for instance. Normally one should never need to disable or pause protection and use safe exceptions instead. FRiC 1
ESET Staff MichalJ 434 Posted January 11, 2023 ESET Staff Posted January 11, 2023 It´s actually pretty simple. ESET PROTECT Is built with concept of "task reusability" in mind. So you can create a task, for "disabling protection" (type run command, use the command from the example from Marcos). Then the only thing to do, is that you click on the device in ESET PROTECT, and choose option "run task". Find the one pre-created (you can name it as you wish) and execute it. However, as Marcos stated, this is not something that users / admins should be doing, as disabled protection is disabled protection. Therefore, it´s not as straight forward, but could be done that way.
Recommended Posts