Secure Cloud

When installing WebRoot Secure Anywhere on a 2016 server do you need to change the policy in the Console to “Server” before installing on the Server.I have installed all so far with “unmanaged” policy until I get use to the software. Should I uninstall and reinstall with Server Policy instead of unmanaged or can I change the policy within the program?

We have enabled Evasion Shield and set it to remediation after a test period. The problem is that we do not receive alerts when a script is detected/quarantined. We have to run a report, daily, to discover potential problems. Do you confirm this behaviour?   Thank you in advance. -- Nicola

Hi,   We're currently running a demo of the DNS Protection agent.  So far, I like the ease of install; just enable it on the Webroot SecureAnywhere Endpoint Policy and it gets installed pretty much immediately (next poll).  That's nice.  Also like the DNS protection at the network level - guest wifi, DNS forwarders.  So anything devices on the network get the benefit as well.   What I'm not liking is the reporting.  There's no way to do a custom report on a user's web browsing.  And there's no DNS Charts for the Dashboard.  It would be nice to quickly look at the Dashboard and see some charts for Web Browsing - Top Users, Threats Blocked, etc.  We're currently a Forcepoint shop and potentially looking to switch   Are there any Reporting updates coming soon to this product?   Thanks.

My company recently moved from Trend to WebRoot. When working from home I used to be able to use Trend to scan my personal laptop via a local network shared folder. I tried this with WebRoot and it seems to work if I just want to scan one file, but if I choose to scan a folder it doesn’t scan the contents of any subfolders.

I have questions from my clients about Webroot and I am trying to find an answer through the available files, but I am unable to get an adequate answer.

We have to big issue in Turkey to use Dns Protection. In the starting of computers Dns Protection agent cannot resolve any websites like 5 minutes. After 5 minutes Dns agent working properly. This is a very big issue, a lot of customers, and potential customer affected from that problem.

Can anyone tell me where I should make new DNS protection policies? If I go to the larger policies at the top, these don’t show up in DNS protection. If I go to the cog for DNS protection, you can only choose a policy for the site as a default. If I go into the client this is to manage Endpoint Protection. We have a customer, say “steve inc” for example, I need half to have one DNS policy but the other half another, it would seem this is impossible?

We have been using Webroot Secureanywhere for over 8 years at our business. This last year we have downsized our staff significantly and at renewal we notated we no longer needed our full 20 stations, but instead only 5 licenses would be needed. These systems had webroot removed and were booted down. The backend showed only 5 active stations/licenses. Sure enough at renewal we were billed for all 20 stations.I contacted support and got a response WEEKS later that a refund request had been escalated. After an additional week with no return I contacted via phone. Long story short we finally were downgraded to the correct license amount and received a refund about 38 days after the initial request.Keep in mind, the downgrade was an annual payment. The following month (March or April) we started to be billed an erroneous $13. 50 a month since then. I then opened another ticket las month and received a response 7 days later saying they were looking into it. Days later… noth

Or is there a way to do it from the groups list as it'll show all of the old but no option to disable. We have 90 clients and 3K devices and the switching between tabs in the Webroot Console is ridiculously slow and tedious switching between tabs.

I see a new version for Mac has been released since 8 days, a new version for Windows has been released since 17 days. However, all agents in my clients are stil the old version. Mac is 9.1.1.66 Windows is 9.0.27.64  I know they said not everyone will receive the update at the same time, but one or two weeks should be enough? Any problem with upgrading?

I have mentioned this to our sales reps several times to pass on but after almost 2 years of using this product it still isn’t a thing so I’ll post here. My contract is up in August and if I see no plans for improvement then I’ll be moving to Knowbe4.  -------Feedback------- When we run a campaign for a client we do it monthly. We’ll make our own phishing templates or use the built in ones. When the campaign is over I am required to provide a report to my client on the breakdown of what users did what. What I currently have to do is download the simulation stats PDF from the dashboard which provides the most basic readout of what occurred. I image clip the graph image and save it and place it in my own report. I then have to download the stats in .csv form which gives me the user breakdown. The .csv sheet is all the data I need for the customer but I am not going to send a client who is paying for this a .csv that is unreadable to a regular u

Hi,We’re planning to start rolling out Webroot Security Awareness Training to our customers, however we’d like to ideally add our logos either instead of or alongside the Webroot logos on the portal and reports - is this possible? Thanks

Afternoon all, just wondering if anyone in Australia or New Zealand has encountered issues around logo use etc when creating phishing emails.  It seems that fair use etc may allow some use (according to a few US articles), but we don’t want to inadvertently damage anyone’s reputation if an email makes it to social media etc.  All links going to an obvious education page etc should make things OK within target clients, but I am still concerned about any potential blow-back on us, our clients and the companies if we use a logo etc. without prior approval.  I know the bad people don’t care as I’ve just seen a bank phishing attempt that was very well put together and a fake invoice email trail complete with payment request, but actively approaching a company and explaining what we are doing and asking for permission to use their intellectual property is (in my mind) impractical, especially when considering a multi-national with probably more important things

Within my site, I’ve renamed some endpoints so that they are more descriptive than some of the generic hostnames. Here’s the issue, those custom names don’t appear in the global console - neither in the groups nor in reports. I’m trying to deploy evasion shield, but this limitation makes it unusable.  Evasion shield’s reports don’t appear within my site, only the global console.  But the global console doesn’t honor my custom endpoint names.  So when I run the evasion shield reports, I get a list of endpoints but they are the original hostnames which are meaningless to me. I have contacted support about this issue.  They advised this is a known issue but is low on the priority list for dev.  I suspect that Webroot doesn’t fully understand or appreciate the depth of this problem. You keep pushing to use evasion shield, but evasion shield isn’t useful  for me until this is fixed.  Either include the evasion shield reports within my site or fix this bug

I’ve deployed software install via GPO on a couple endpoints to test. The software shows on the endpoints but  not on the management console and It’s been over 24 hours.

I’m having trouble creating blacklist rules for file paths.  Guides I’m finding say it should be possible, but when I try it’s only allowing me to use the md5 hash and not the path.  Any ideas?    

Hi I just wanted to ensure my understanding on how endpoints (managed by GSM) get policy updates and how this is reflected in the GSM portal. Setup: I have a group called “test-group” I have a policy applied to the group called “test-policy” I have a pc in that group called “test-PC” The test-policy has polling interval set to 15 minutes   Questions: If I make a change to the policy, “test-PC” endpoint should reflect that change within a max of 15 minutes? How long should I then expect for that change to then reflect back in the GSM portal. If a policy polling interval is 15 minutes, then the “Last Seen” value should never be more 15 minutes in the past (unless of course the device has been switched off)?   2 Specific examples: This morning I have turned on the Evasion Shield for a group of se

Hi   I have some questions regarding the fundamentals of Webroot and the GSM and Endpoint Protection Console We are an internal IT department that use Secure Anywhere Webroot Endpoint Protection (We are not an MSP). We have 1 site in GSM which contains groups of our company devices with policies associated to those groups (IT Dept, Users, Server, Terminal Servers etc) Policies in GSM are pushed down to the Endpoint Protection Console (We didn't do this and must have been converted from the legacy console when GSM was pushed out to us……) What console should we be using to manage everything? I can see there are some major differences: for example: GSM Policy management has features that the Endpoint Protection Console doesn't such as the new Evasion Shield - This doesn't show in the Endpoint Protection Console at all Endpoint Protection Console has many more agent commands than GSM Reporting

Is Webroot scheduled scan time based on the timezone that is set within the management console or is it specific to the EndPoint’s Clock/TimeZone?  I have Management Console set to Central Time and would like endpoints to scan in Central Time.    Thanks

Is there anyone that has problems with duplicated hostnames/agents in your customer sites? I have to frequently check all my sites for agents that has been duplicated and therefore breaks the licensing seats. it should be fixed because this is a problem but for now i can manage if i could get a better view of sites that has to many licenses issued.

 I am new to this group, so please tell me where the most appropriate place this question should be placed.   I have a bunch of developers who do stuff that once in a while Business Endpoint Protection complains.   From what I can ascertain, in the policies I enable the policy “Allow SecureAnywhere to be shutdown manually”.  From what I can see this is the only way to allow developers access to the HOSTS file for example.   I need to be able to monitor the Manual Shutdown of and startup.  I see that the Windows Application Event Log Security Center application creates events and records “Updated Webroot SecureAnywhere status successfully to SECURITY_PRODUCT_STATE_OFF.” and “Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_ON.”   Is there a way from within the Webroot Business Console to get this information for an endpoint?   Or is the only way to do this is to create a central event log mana

Hello Webroot Community! I hope you are staying safe and sane during this historic time of disruption.  As the Content Development Specialist for WSAT, my goal is to provide you with valuable Safety Awareness content based on real-world threats.  I hope you are pleased with this month’s WSAT content update. Highlights of this month’s release are: Three COVID-related phishing templates We’re seeing an above-average 12% clickthrough rate on these, emphasizing how important it is to warn your users about these scams. Social Engineering training course You’ll want to make this your topical training for the month, and part of your core security training going forward. Zeppelin Ransomware Security Briefing This is the first in a planned series using a new training format.  Webroot Security Briefings are 2-minute videos designed to quickly inform your end users of notable trends and i

Support ticket (#314077) I got on an endpoint yesterday and the Webroot icon down by the clock was greyed out and when you hovered on it, it said “Protection Disabled”. All I had to do was open it and click “Enable” but that bring up a couple questions: 1) How did it get disabled in the first place? I can see the option to “Shut Down Protection” but not simply disable it. How did the end-user do this? 2) Why wasn't I notified and why is the “Disabled” status not reflected in the GSM?   Supports response: To #1 we don’t know. To #2 they never responded even though I asked it twice. Gotta love their support…….  

Is there a recommended config for setting up a G Suite domain for Security Awareness Training campaigns?  As it is now, I have whitelisted the IP address found in the documentation, but this doesn’t prevent G Suite from marking the simulation email with a big RED BANNER warning the user.  Would be nice not to have that happen for more effective training.    

I have never, in my life, seen a bigger waster of time and money. This software is a bottomless pit of pain and frustration with no end in sight. The GSM can’t contact the endpoint. Commands expire. The endpoint can’t contact the GSM so you can’t uninstall it because it things it is managed. Excludes aren’t excluded. it won’t register as the the “on” virus in Security Center so both Windows Defender and Webroot are active. It won’t install or uninstall properly. It is hit and miss if it puts itself in Add/Remove programs. The latest update makes the WRSVC service fail to start because it is improperly digitally signed. Endpoints show up in the wrong site It thinks programs are harmful that are totally safe.            Now you can’t even end the numbering system in the post! Can’t you do anything right Webroot! Do not use this program! It is total junk!