Endpoint Protection

MSP here.  I’ve seen other posts that discuss Webroot with Windows Defender, but now that it’s 2021, Windows 10 has changed a bit.Why other posts don’t apply anymore: Disable periodic scans in Windows Defender is no longer an option According to this article, you can set a DWORD value in the registry to enable Passive Mode for Defender, however, upon setting it, is has no effect on issue #1 belowTwo issues:With Webroot + Windows Defender enabled, Windows Defender is still actively scanning data in real-time.  I ran a test and saw the Microsoft Anti-Malware service spike up to 30-40% CPU usage.  Webroot is installed and functioning correctly, but Webroot doesn’t seem tell Windows Defender to tur

Is anyone using Webroot and N-able RMM, any integration between the two?

My alerts and any details I have been able to find in the console all refer to paths with variables that are not resolvable.   Is it possible to get the full actual path of malware rather than it showing with variables like %appdata%???   The problem is I do not know which user so I cannot determine the path and more importantly who.   This is an example of the issue. Who's appdata?   Threat List: APPLICATION-C2A064D9174E0B78AFDA[1].JS, W32.Trojan.Lisp.Autocad, %appdata%microsoftwindowsinetcachelowie4lldmwe4,   http://snup.webrootcloudav.com/SkyStoreFileUploader/upload.aspx?MD5=F239541E10FEF69C6D9AFCD7D897AD58 F239541E10FEF69C6D9AFCD7D897AD58,

Looking for evidence/story/anecdote where this feature successfully blocked something malicious.  The feature looks intriguing, but we’ve had enough webroot problems with their basic features and I’m hesitant to introduce what looks like a beta still without a known upside. 

Hi all Less than 20% of my endpoints are showing up in the dashbord? They all are showing upevery where else but not in Dashbord? Thanks in Advance...Xt

Hello, Is there any way to control what applications are listed under application protection from the web management portal?  We’re looking into this because lately we’ve had quite a few clients being unable to open chrome because webroot is stopping it from opening, and we can’t figure out what is telling webroot to put the chrome exe under app protection.

Hi Team,Is there any command to access the webroot scan results/reports thru command line ? If yes, please let me know those command(s)Thanks in Advance!

I would like to know if it is possbile to have the Webroot Billing information mailed to me every month.We are a MSP and this would be really good to have.Or if it is possible to do this with the Universal Reporter?

Hi,I need to remove or disable webroot for an upgrade of the computer. The error is to please contact your network administrator, to access the user interface.Problem is the software was installed by a another company who is no longer administering the computer and we are unable to contact them so they can disable it.Can the Webroot just be uninstalled, or is there another way to open the programme. Its still active so we may as well use it if we can, but we need to setup white lists as well.Thanks 

Webroot has effectively shut down O365 for my whole organization by blocking the login page.It doesn’t matter which way we approach, eg. “portal.office365”, “portal.azure” it’s when you get to the login landing you are met with: Warning: This is a High Risk SiteWebroot has blocked the website you are trying to access for your protection:https://login.microsoftonline...Detected Phishing SiteThis site might try to trick you into disclosing your login, password, or other sensitive information by disguising itself as a website that you trust.

How can I restart the Webroot services, WRSA?  I have tried an uninstall/reinstall.

I just wanted to share my own recent experience with uninstalling Webroot Business Endpoint Protection which has received a number of questions over the years and hopefully help someone out. This is the process that I’ve had success with and does require that your agents are checking into the Webroot console and your RMM tool (mine is ConnectWise Automate)Adjust your policies so that agents check in as frequently as possible Tag the target agent(s) with the “unmanaged” policy. For off-boarding, etc., I use a separate group with the Unmanaged policy applied and just move the agents into that group and apply the new policy. Allow them plenty of time to check in and get the policy update. Issue the Uninstall Agent command from the console. We’ve had about a 90% or so success rate with this command. Some will report that the command has executed, but continue to check in. For instances where the console uninstal

How do you delete computers from the deactivated endpoints list?

How do you Delete a PC from the portal after it has been replaced with new PC.

I went in to the GSM console 3 days ago and whitelisted several a couple for a site yet when I look at Webroot on one of those endpoints nothing shows up under Block/Allow files. It is all done via the GSM because when I try and and "allow" files on the endpoint it says I can't and that they must be added via the console. So.... what am I doing wrong?

Hi,Please how can I generate a summary report about all my PC statuses in lieu of checking every single device for health and status?Thank you,Liz

It would be great if there was a document which had the complete list of command-line options/switches for both Windows and Mac as well as documenting the functions of each option/switch. I know the existence of https://docs.webroot.com/us/en/business/wsab_endpointprotection_adminguide/Content/ManagingEndpoints/IssuingCommandsToEndpoints.htm and https://download.webroot.com/WSAB-EP_GettingStartedGuide.pdf. These pages aren't enough as they are either incomplete with information or don't display commands for Mac. The reason why I say the second link is incomplete is because other than not displaying Mac specific/only/non-functional commands, it doesn't show the -si

Hi,Since the change to the updated console we are seeing discrepancies in the number of entities. Example, one customer shows 12 entities when they only have 11Example2 customer shows 15 entities however there are 18 If we go into the legacy console the number align and reflect the number of seats allocated. Any ideas

I wanted to text blocking 7zip on a Policy Copy due to Ransomware concerns where 7zip is used to encrypt files, but I cannot figure out how to find an option to block applications from the Admin Console. I see the option on the Workstation doesn’t allow changes (PC Security - Blow/Allow Files).Also, I used to be able to allow/block applications under Agent Commands in the old console, but no longer see that opion in the New Console.Any help would be appreciated.

Ugh. I hate when companies “change” things and think it’s better. I have over 100 devices that were grouped together by service plans, (I resell webroot to home / end users) and then each pc was renamed to the customer’s name for billing purposes as the actual hostname is meaningless to me. The new dashboard just wiped all the host names I had created over the years and reverted them back to the pc’s original host name so now I have no idea which pc belongs to which customer. And looking at the details, when a home / residential user is using a log in account of “princess” that isn’t going to tell me what the customer’s last name is for billing. Who thought this was a good idea without telling users / admins? Anyway to revert this? 

Overall, I do like the new console, but I can’t find the column chooser so I can view useful data like last logged on user, IP address, agent version, etc. The ability to export to csv also appears to be missing which was useful in sending teams CSVs of agents not seen recently. I can still get to some of that functionality by going to site → Endpoint Protection and going to the old console, but that is temporary and very clunky. Is the functionality described going to be moved into the new console? Is there a tentative timeline?

Where can I find deactivated endpoints in the new console?

There’s a list of URLs that need to be granted access through firewalls from your KB that float around this forum. In anticipation of a new console going live in five days, are there any new exceptions that need to be made to our clients’ firewalls in order for endpoints to continue checking in?List of URLs we currently allow traffic to:*.webrootcloudav.comAgent communication and updates(Please note: Some firewalls do not support double dotted subdomain names with a single wildcard mask (i.e. g1.p4.webrootcloudav.com being represented by *.webrootcloudav.com) so some environments migh

Hi, Is there a way to include new targets in an existing Program.  I launched a Program and now I need to add the new employees into the existing Program. I believe we can include new campaigns to the launched program but not sure of including the new targets which has been imported will be part of the Program too.  Thanks

Hello Some of my endpoints became not seen recently, its no possible to uninstall webroot because of de permissions.It makes no sense uninstall and reinstall, they to many endpoints. Can anyone help me to solve ? Regards Luis