topic Re: How do I disabled endpoint on a client in Endpoint

How do I disabled endpoint on a client

Kevin_T600 — Fri, 08 Feb 2019 17:44:54 GMT

Does anyone know how to quickly disable all endpoint blades on a client machine, for say software installation or troubleshooting?

I was given the idea of using a policy to disable blades, but that only disables some blades, not all, and it really isn't very convenient when you're just troubleshooting or doing a quick install.

Any ideas?

Thanks

Re: How do I disabled endpoint on a client

PhoneBoy — Sun, 10 Feb 2019 07:42:16 GMT

Unfortunately, the only way to disable blades is through use of policy.

If this doesn't work as you expect, you need to work with the TAC to understand why.

How To Open a Case with TAC and/or Account Services‌

Re: How do I disabled endpoint on a client

Michael_Overby — Wed, 13 Feb 2019 18:37:38 GMT

Kevin, Tech support can provide you with a file named passdialog.exe

You run it, type in the uninstall password you have set.

Change the blade service to disabled.

Stop the blade service via task manager.

Re: How do I disabled endpoint on a client

Kevin_T600 — Thu, 14 Feb 2019 12:17:38 GMT

I actually was provided that file, but it didn't work properly for us.

Using the policy method does work, except for the firewall. I was told that this year they will be coming out with a method to completely disable endpoint on the client. See what happens.

Re: How do I disabled endpoint on a client

nagaraja_cs — Tue, 10 Mar 2020 06:13:59 GMT

Hi Team,

I have the same requirement,please let me know if we can the disable the endpoint client on the user machine or from the Endpoint Console for temporary purpose(for troubleshooting).

Re: How do I disabled endpoint on a client

MikeB — Mon, 29 Jun 2020 22:23:49 GMT

Any news on this subject?.
We have the same requirement from a customer to be able to quickly disable the blades/protections only for troubleshooting purposes.

Re: How do I disabled endpoint on a client

PhoneBoy — Mon, 29 Jun 2020 23:47:58 GMT

From a security perspective, this doesn't seem like a great idea.
If I can execute some command that disables the security blades, so can a potential attacker.
Or an unsuspecting user could be "socially engineered" to do it.
That's just my take.

That said, if this is a hard requirement, I recommend engaging with your local Check Point office.

Re: How do I disabled endpoint on a client

MikeB — Tue, 30 Jun 2020 13:54:51 GMT

thank you for your answer PhoneBoy. I agree with you about the security risks that this would imply if the user could do it, but it would be very useful if this could be done with a push from SmartEndpoint.

I think SBA solution is really excellent in terms of security, but it lacks the ability to provide more tools/options for troubleshooting that can assist the helpdesk team.

Typically these endpoint solutions are also managed on the front line by a help desk team (not directly by a security or incident response team) who value the fact that the solution has a tool that provides them with the ability to manage 1000 or more devices.