Secure Cloud

Hello! I have a questing regarding the reports generated from all the sites and clients in the GSM. The dashboard showes that there are an x number of active clients, but this number deviates from the number of site workstations. Is there any raport that shows this so I can take steps to fix this? Thanks in advance!

Hello, We have an infection currently spreading through our network. New endpoints are popping up on the SecureAnywhere console every few minutes as infected. Some are 'protected', others are 'need attention'. The infection is reported as W32.BitCoinMiner. The file list is shown below.     I need to determine  a. The point of entry - which computer introduced this and how. Was it via the web? local usb device? etc. b. How the infection is able to spread. So far it has affected two AD sites, spanning two IP subnets. It has not spread to any servers yet.    Does anyone have any tips on how best to understand and investigate the two

I've installed webroot on a macbook using wsamacsme.dmg and key The installer start, stopped when there's a security setting to do, then start to scan After few time the windows closed and i've no icon finder bar ! I cannot enter on SecurAnywhere control panel..   I've tried to uninstall and reinstall but nothing.. I've set as not managed on GSM but no icon the same.. Looking process i see it running what can i do more ??

Folks,   I'm really interested to understand what apps you are running on users Windows computers.  This is for us to better align our test systems with what you have.    Example:-   Windows 7 32bit with Office 365 WSA Chrome  Open VPN Client RMM Agent  Please post below with your replies   Many thanks   Jonathan.giffard Senior Product Manager WSA Business    

Hi guys, I have some noobish questions on depolying to endpoints using group policy in active directory. I know I can use the MSI file that is downloaded from my web console. I have downloaded it.  I have also put that file in my group policy shared folder, and I can see how I deploy MSI files using GPO>Computer Configuration>Policies>Software Settings>Software installation. Now where to go from here? I understand that the MSI is interactive, and I want it it to be silent and put in its own product key.   It sounds like what this guy is talking about here, but I don't know where or how to put in those command line arguments....and where to go from here.  https://community.webroot.com/t5/Endpoint-Protection-and-GSM-KB/Using-MSI-for-Deployment/ta-p/326532

What is the correct syntax for registry commands via the console (Agent Commands / Advanced / Run a registry command)? Online help does not give any example, only says this short advice:   "This command uses the same syntax as reg.exe, but does not call reg.exe"   So I tried issueing the following command:   ADD HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer /v NoDriveTypeAutoRun /t dword /d 000000ff   but the I dit not succeed, even if the "View commands for selected endpoint" log says that it was executed. (And BTW, why does not this log shows back any result?)   So what is the correct syntax?

When I running webroot secure anywhere for business on some computers, I found the sonicwall blocking the information being sent back and forth to the secureanywhere consul. If I Shut off GEO blocking it works fine, so evedently its being blocked by country any ideas how to fix this ? webroot says they don't use a specific country but I find that not true since the Geo blocking stops the service when sent from other countries other than then the USA

Hi there,   I'm currently trialing Webroot Endpoint for our business. I'm pretty impressed, but there's a combination of two things that I find a little worrying. I'm hoping someone can put my mind at rest!   I spotted the "Agent Commands" dropdown, which allows me to remotely send a variety of commands to an endpoint via the GSM. This includes some really powerful stuff like "Download and run a file" and "Run a DOS command". I'm concerned that if there's any way for an attacker to get access to GSM (either through my incompetence or a problem at Webroot), those options give them a massive amount of power to cause havok across the network.   That, combined with the lack of 2FA on GSM, seems to me to be a pretty huge potential security problem.   Is there a way to disable those options? Is there a reason that I shouldn't be worrying about that?   Any thoughts or advice would be much appreciated! &

Just an FYI to anyone seeking to turn off WebRoot DNS Filtering: My recent experience is that turning off DNS Filtering in the GSM does NOT remove the DNS Filtering agent from the client.   I had clients unable to surf due to DNS issues with after DNS Filtering was activated. De-activated DNS Filtering, issues continued. Found the DNS Filtering agent still installed on afftected clients, altering the DHCP DNS settings. Manually removed the agent.

We administer Webroot that is integrated with AEM (Autotask Endpoint Management) and that works reasonably fine. According to our policy webroot is supposed to be installed automatically with the installation of the AEM agent, and sometimes this installation takes place instantly.   In other cases, it might literally take more than a day before Webroot is installed and overall any change in webroot administration from AEM-level can take a really long time to kick in.   Has anyone who uses Webroot with AEM integration possiby experienced the same problem, and can that be remedied?

I just enabled a feature of our email service that tells me when incoming emails were not sent via TLS. It is telling me that Infection Alert messages from noreply@webrootanywhere.com are not utilizing TLS. This is probably minor, but it could constitute a security risk in some cases.

Hi - I'm running Endpoint Protection 9.0.15.50 on a windows 7 pro machine. Trying to upgrade to Win10, which requires multiple reboots. Upgrade fails when Endpoint comes back on after the first reboot - at least that appears to be the issue. I'd like to test it by disabling Webroot until I manually re-enable it.    Is there a way to disable protection indefinitely or for some fixed period of time rather than "until the next reboot"?   Thanks!

Hello all,   I have a site that is getting tons of the c:program bug this morning.  I thought this bug was fixed as I'm finding solutions from 2014.  What is causing this?  It's almost 5 machines that we've found so far.  No changes were made to the site configs.    

I'm on a MacBook Pro running El Capitan (10.11.6).   lsof shows that Webroot is listening on port 8090.  This conflicts with other stuff I'd like to run on my machine that's non-trivial to change the port assignments.   Can it be changed to a different port or stopped?

Hi All,   I am curious what categories we should look at blocking to prevent users from using torrents?    I have Security Risk and the Human Resources categories selected. Are there any others that we should key in on.   Thanks in advance for any suggestions.   Chris

What is the difference between Mac and Windows which disallows the polling interval less than 24 hours on the Mac? Is there a solution or hack that can be applied to a machine to allow the polling time to be less on a Mac?

I know there is a limit of 1,000 sites per console. What is the limit for the number of groups per site and/or total?

I use Webroot across aproximately 80 computers and so far 3 have picked up an update on the browser filtering extension as of this morning (5/2/18 @ 8am) this causes one of the IE processes to fail and then the desktop will not able to be interacted with.  All programs/links or anything on the desktop is not responsive until either that failing IE Process is forced closed.  Accessing programs through the start menu continues to work fine, only affects the desktop.  This also only affects Windows 7, it does not cause the issue in windows 10.   I've killed the bad IE process on one computer and restarted the other 2, the restarted computers have yet to have the issue again, the other one has experienced the issue twice more.  Do we need to restart the computers after this extension upgrade to finish an install??     Anyone else having this issue?

I am unable to start webroot on every Mac I try to open it on. Nothing happens when I click on the application. The Mac versions in question are 10.9.5 (13F1911), macOS 10.13.1 (17B1003), 10.13.3 (17D102). Are there any remedies and/or diagnostics I can perform?