Secure Cloud

Hello, Is there a way to integrate Webroot Endpoint Protection with a SIEM like ArcSight or similar ?Thanks.

This should be simple: we run a large multi-site network with a number of admins.I need to see the status of our Admins:Name and email, 2FA status, admin type (all on current console) Most recent login date Any login failure info you can provideI can’t see ANY way to discover which admins haven’t logged in.  Not in the old or new console, not in API reporting. :(How to solve it?

This option is not available to me --> When I select the endpoint the “Move endpoints to another group” option is greyed out. Please let me know if there is a different way to do this. Thanks in advance.

Hello. Our SAT module shows incomplete but I’ve completed it already and when I go back to the training link, the status is up to date and shows completed. Can you help me figure this out? Thanks! This is what shows in Individual User Logs  This is what shows when I go back to the training link 

how do I send an SAT training video to the an IT manager to review before a campaign goes out

Hello forum members,I hope everyone is doing well. Today, I would like to discuss an issue I've been encountering regarding the compatibility between Webroot DNS Protection and our web filtering software. If any of you have experienced similar challenges or have insights to share, I would greatly appreciate your input.The Challenge:Compatibility between Webroot DNS Protection and Web Filtering SoftwareAs an organization, we understand the importance of web filtering [ https://lenovonetfilter.com/resource/five-common-web-filtering-questions-answered ] to ensure a safe and secure online environment for our users. We have been using a web filtering software solution to control internet access and block inappropriate content. Recently, we implemented Webroot DNS Protection to enhance our overall security measures. However, we have encountered some compatibility issues between these two solutions.Specifically, we have noticed the following challenges:Conflict between Webroot DNS Protection

Hi team,I see that there is a feature requirement asking for a tool that forwards logs to SIEM, although I cannot access it.Is there any deadline for the publication of this feature? We have a customer that is asking for it.Thanks!

We have used webroot for many years, without any major hickups. We have a farm of servers running web applications based on Microsoft.net, so nothing particularly fancy but some features in the system are a bit I/O intensive. They are hosted on GCP and AWS, so vms basically.Now when we have (finally) done “in place” upgrades from 2012 R2 to 2019, we notice that everything went to a halt, basically losing about half the performance on average. First I thought, 2019 is a bloat, maybe we need to do clean installs instead of in place upgrades. But no, this doesn’t help. Then I saw that Defender was active next to webroot. This was a bit alarming, and after disabling Defender, we notice an improvement. But still, if we also disable Webroot we gain another 30% in performance and it’s only then it is comparable to 2012 R2 performance.I’ve tried adding exclusions and it does help a bit (but only if I untick “detect if malicious”) but is that really the only way to go?Anyone has had similar iss

With Google announcing that they are now selling registrations for the .zip and .mov top-level domains, we are looking to strengthen our customer's cybersecurity defences by blocking these TLDs.I tried to do this through the Web Overrides section in the Webroot Management Console. However, I got an error indicating that the *.zip and *.mov URLs are invalid. Is it possible to block TLDs through Web Overrides?

Hi,Does Webroot Business Endpoint Protections works in Smartphones/Devices?Thank you! 

Hello, after  i enable webfoot DNS  and create dns protection policy  i just check social networking  , when i apply this policy to site  pc’s can not access gmail  from any browser what is the reason of it ??

Hello,Webroot client is stopping us from running certain programs.  How can I allow users to disable webroot on their computers when they are running their program? this will be company wide.  I want to give them right from the webconsole as I’m the admin Thank you

Hi, Is it possible to have something like a “MSP report“ instead of a report för every Site in Webroot?It would be much helpful if the reports could report several/all sites with information per Site.It’s tidious to have 1 report/site and the go throw these 1by1,Some Summerizes Reports would be very helpful...or maybe im missing something here?

We are having an issue with the Business Webroot where users are able to install more Entities than the assigned number of End Point Seats.This is causing issues with us, as we are getting billed for these additional Entities, and do not seem to have any control as to warn users, or stop them doing this.I have raised this in the past, but no solution was provided, other than to get an alert, and then sort out this issue manually.We are finding management of this is requiring more time resource overhead than what is worth reselling the Webroot product for.We simply seek to block sites being able to install and license Entities over and above the assigned number of End Point Seats allocated to the Site.Is there a way to achieve blocking Sites adding more Entities than the assigned number of End Point Seats?

I’ve disabled Show SecureAnywhere in Add/Remove Programs but WR agent is still showing Programs and Features. I’ve already adjusted the polling to 15mns and it’s been 24hrs but nothing has changed. Any tips to resolve this?

I recall a while back Webroot had some sample curriculum or a training path for the SAT videos, but can’t for the life of me find that page now. It basically had a suggested order to watch the videos so people got a good overview of cybersecurity. Does anyone know where to find that? Thanks!

Hi,We have a small network of ~50 users all on the same webroot account. I am doing some email safety training and one of the tasks included in Microsoft Defender is a phishing simulation. It sends an email to all users, simulating a typical phishing scam. It logs details of all users who click through and share their credentials on the fake site. When I ran a test to my user, it looks like webroot is blocking the site as suspicious. Our current configuration does not provide users with the option to override this. Is there a way to unblock this site so that I can continue my test?For reference, the site it’s directing me to is https://www.attemplate.com/.Thanks

I use webroot to centrally manage devices for out clients. Our policy is set to poll every 15 minutes. I’ve sent the command to the device that I want to uninstall it on, the command log shows delivered, but the program isn’t uninstalling. I’ve reset the device too and tried to refresh config on it but still webroot remains.  How long does it take for the webroot client to act on the commands it receives? How can i force this to unistall?

Hi, I tried to enable DNS protection for a macOS device (v10.15.3 Catalina). I noticed there is only a Windows icon on “Install DNS Protection” settings. Does this mean DNS protection is not yet supported on macOS? I checked the docs but couldn’t find anything about this. Is there a way to manually install the DNS protection agent if it is not possible via the policy settings? Thanks for any help.    

Greetings Webroot Community! I wanted to share a recent issue that we have been experiencing with some clients that use both Microsoft Office products, and Webroot Business Endpoint Protection. Recently, some of our users have reported that when they are trying to edit and save documents in Word and Excel they experience a pop up that advises them that they cannot save their changes because “another user” currently has the document open. We tried several different ways to get this error to go away, however each time we have had to uninstall and reinstall the Webroot agent on the client machines. Our working fix for the issue is to deactivate protection in our RMM portal, on the endpoint in the management console, and then uninstall the agent on the system locally through a windows command window using the following command: “C:\Program Files (x86)\Webroot\WRSA.exe” -uninstallWe then reactivate protection through our RMM portal, allow the agent to reinstall, and sign out and back into t

Hi there,I am wondering if anyone else has encountered this issue and has any advice:Every time we push a phish test, we have partners forward the phishing email to our help desk. What we discovered recently is that when someone forwards the email our outbound mail filter “clicks” the link.I have discussed this with our spam filter and there is no workaround. They have to protect their IPs from being blacklisted as a source of spam.I’m just curious if anyone else has encountered this and ask what you’ve done.Seems to me the only way to prevent this is to educate users NOT to forward the emails. But we also don’t want to discourage partners reporting security concerns.Open to suggestions. What do you guys do?

Anyone seen a guide for interpreting the wrlog.log?

I have been running quarterly phishing simulations to keep our users on their toes. I noticed that a handful of users are flagged as deferred in the Campaign Phishing Line Data. Do you often have deferred emails to your users? Do you care about them? Should we do anything about this? Thanks!

Hi All.  Any idea of when we will be able to clean up our consoles by removing sites that has been deactivated, as well as endpoints? We have hordes of these across the years using Webroot, and it is making my OCD itch.  

I am using Management ConsoleCE 22.4. Just created a new site-only admin, and assigned admin permissions on that site only. However, after logging in to the new admin, the new admin can view the list of all other admins.Is it a bug in the Management Console?