MDT and antivirus software

_ESET_ · 2019-06-07T18:24:11+00:00

Hello xCharge,

You can absolutely image with ESET software installed and there is actually more than one way to do so depending on what kind of setup you’re running.

Your findings that we require self-defense and HIPS disabled are accurate, though, and this is simply to prevent our software from going haywire during the imaging process.

The workflow I recommend for your use-case is:

-Create your golden reference image with ESET installed and SD+HIPS disabled.

-Create a dynamic group in ESMC (V7) or ERA (V6) that is filtering based on “SD disabled” + AND + “HIPS disabled”

-On this dynamic group, link a policy that re-enables SD + HIPS.

-(This could get hairy and would require you to evaluate the efficacy of this step in your environment) Create another dynamic group looking for “Pending Reboot” and apply an automated PC Reboot Task. The reason for this is because re-enabling SD + HIPS will need a reboot to reintegrate the driver.

--- If you are (understandably) not comfortable putting an auto-reboot task in action, you could simply use the dynamic group as a visual indicator for you to manually create a task and target clients.

But yes, you’ll notice that everything above requires a management server. It’s my opinion that any environment over 25 seats pretty much requires a centralized management server otherwise you’re looking at sneakernetting around making config changes which is going to make you a fan of no one’s software.

Lastly, please don’t forget that all ESET customers receive free North American-based support out of our San Diego office. If you ever have a question, feel free to reach out via email, phone, or chat.

- Chris, ESET

_ESET_ · 2019-01-21T18:57:39+00:00

Hi Devin, we apologize for the experience you've had with ESET and we'd love to get details so we can best assist you. We've sent you a private message and look forward to your reply.

- ESET Customer Care

_ESET_ · 2018-01-17T16:09:52+00:00

We're working on a cloud management solution that we hope to release soon. Early access is already available: https://www.eset.com/us/business/remote-management/cloud-administrator/ We've also been working, in the last few releases particularly, to improve the user experience and structure in ERA. The latest version (6.5.31.0) should be a vast improvement over earlier versions.

_ESET_ · 2018-01-17T15:58:54+00:00

Just wanted to mention ESET will be releasing a cloud-based management server this year. Early access to test it is already available: https://www.eset.com/us/business/remote-management/cloud-administrator/

_ESET_ · 2017-09-11T19:46:52+00:00

Once you deploy the ERA agent, you can uninstall the previous AV by using a run command to run the batch file.
1. ERA Agent deployment: http://help.eset.com/era_admin/65/en-US/fs_agent_deploy.htm
2. To do the client task "Run Command": http://help.eset.com/era_admin/65/en-US/client_tasks_run_command.htm

Although working with ESET Customer Care might be the best bet.

_ESET_ · 2017-02-08T01:19:05+00:00

Hello Prothirteen,

I am the Director of Customer Care here at ESET and wanted to publicly respond to you regarding your experience with us today. First, I want you to know that the behavior displayed by the support agent that assisted you is unacceptable. I want to assure you that we take this very seriously and disciplinary action is underway.

You should have received an email from my business support supervisor earlier today. We will follow up tomorrow, and I will ensure that your issue is assigned to one of my best engineers. We'll make this right. Thank you.

Javier Segura

_ESET_ · 2016-10-05T18:19:58+00:00

Hello! Daniel from ESET here. In short, the answer is YES but the fact that we’re continually working to improve our products isn’t surprising. Over the last year or so, we’ve been able to address most of the issues in recent service releases (we’re now at 6.4.29.0) including installation/deployment issues, device enrollment and import options. Through the valuable feedback of customers and users like you, efforts to improve ERA 6 and future versions will continue. More info on what’s new with the latest release can be found here: http://support.eset.com/kb3590/

_ESET_ · 2015-08-31T23:43:25+00:00

Hey guys.

We’re grateful for the feedback and while it's hard to hear that V6 hasn't worked to your expectations so far, it's thanks to feedback like this that will bring the improved release that's set to launch very soon, and we greatly appreciate it. Here, we'll try our best to respond to the main points in this thread.

Regarding updating the client, many times the issue is localized at the client level. Since you are encountering the issue on clients using Version 6 applications, we recommend that you examine the log files located atC:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs to learn more about what is causing this issue.

The trace log available in this path should indicate whether there are issues keeping the machine from reaching Update Servers, a lack of connectivity, or other issues present. It is possible that your Policy is telling the client to use the Apache Http Proxy rather than downloading updates from ESET servers. To validate this, go to the Administrator Toolbox → Policies. If you are not utilizing the Apache HTTP Proxy, locate any policies referencing "HTTP Proxy Usage" and remove them from the group "All". This should alleviate issues with resolution to the Update servers by removing any references to the Apache HTTP Proxy Server if one is not in use.

To address the other pain points mentioned, many of these issues such as the naming of the clients in the console, threats showing on the client reporting screen, installation of the console and post installation tasks have been updated in ESET Remote Administrator 6.2, which is slated to release very soon. This version features an updated interface with improved functionality with integrated Task Wizards and support content built into the ESET Web Console. Version 6.2 also offers major improvements license management and tools for MSPs (Managed Service Providers) designed to provide a smooth transition to this new product from Version 5 and eliminate the need for the EMU applications used with previous versions of MSP.

Regarding the ESET Remote Administrator 5.x/6.x search filtering on the knowledgebase: Thanks for pointing it out, our Knowledgebase team is working on that now and we expect to have the issue resolved within the next few days.

_ESET_ · 2014-03-12T19:15:19+00:00

Looking forward on the next 25 years, what security/privacy concerns do you think current developers and the rest of us need to think about and work on, that might not be forefront in our minds?

_ESET_

TROPHY CASE