topic Re: Pause Harmony Endpoint protection in Endpoint

Pause Harmony Endpoint protection

cjfsoares — Wed, 29 Jun 2022 13:13:30 GMT

Hello,

We are, currently, migrating from a Kaspersky solution to Harmony Endpoint. As so we are still used to the old way of doing things. This moment we are trying to pause Harmony Endpoint protections, in order to perform some troubleshooting in a device. Is it possible? How can we do it?

Thank You very much,

Cláudio Soares

Re: Pause Harmony Endpoint protection

RS_Daniel — Wed, 29 Jun 2022 14:02:45 GMT

Hello,

Check sk178665, it says E86.40 brings this feature "Enhancement: In the new user interface, the administrator can allow the user to enable and disable blades." After switching your endpoint client to the new user interface, go to Menu > Overview > Edit Capabilities, and disable waht you need. I am not sure exactly how this feature works as i was not able to find more details on documentation. HTH.

Regards

Re: Pause Harmony Endpoint protection

cjfsoares — Wed, 29 Jun 2022 15:06:13 GMT

Hello RS_Daniel,

Thank you for your help.

Not exactly what I was looking for. That way any user can turn off the blades. I need something only an admin can do. Like, to turn off protection, you need an admin password. That way, users will keep disabling blades.

Regards

Re: Pause Harmony Endpoint protection

Swiftyyyy — Wed, 29 Jun 2022 15:08:37 GMT

It's somewhat different than doing it through policy.

If you disable a feature (Like Anti-Malware) through policy the inspection does stop, but the service itself is still running, albeit at "idle".

If you use an E86.40 or newer client and use the "Edit Capabilities" option with the new interface, the service itself will be stopped entirely.
I myself keep a "DISABLE BLADE" policy at the top of my rulesets with an empty virtual group as placeholder. That way I can disable blades when troubleshooting without much hassle.

But this built-in capability of the client makes that even easier, though it's unlikely that we'll be moving straight to E86.40 & newer just because of this.

Current recommended version is still quite good.