topic Install only Anti-Malware and Browse plugin in Endpoint

Install only Anti-Malware and Browse plugin

leonarit — Fri, 25 Oct 2024 17:47:48 GMT

Hello,

I'm currently dealing with a particular case, and I want to check with the community before engaging with TAC. I need to install HE on an pc that it's struggling with some IO limitations, we suspect they are hardware related. With the full ThreatPrevention blades the PC becomes unmanageable, so I've disabled all the TP blades except the Anti-Malware, and for now the PC performance is "ok".

We alerted the user that the pc must be checked by IT, but until then, I want to give the user some level of protection using also the Browse plugin.

I noticed that the browse plugin gets installed only when the software package policy has the "Anti Ransomware, Behavioral Guard and Forensics" and "Threat Emulation and Anti Exploit" enable, but these options enable the EFR service and this brings back the performance issues, even if I disable the "Behavioral Protection" and "Analysis & Remediation" on the TP policy.

I've tried to export the Browse install package and installing it, but I receive an error message stating that HE is already installed.

Did anyone have any success installing only the Anti-Malware "blade" and the Browse plugin? If so, can anyone provide some information about the steps that were taken. I've checked the HE Admin guide and CP SK but didn't find anything relevant.

Regards.

Re: Install only Anti-Malware and Browse plugin

PhoneBoy — Fri, 25 Oct 2024 20:45:17 GMT

Maybe @AdiGH has an idea, but I suspect that if you're using Harmony Endpoint (any of the blades), Harmony Browse will want to use the relevant infrastructure.

Re: Install only Anti-Malware and Browse plugin

leonarit — Fri, 08 Nov 2024 15:51:40 GMT

I've opened a case and it seems for now it's not possibly do install only the Browse plugin and the Anti-Malware blade.

TAC response:

Both installations cannot be run on the same machine.

If the customer wants to use the Threat Emulation extension along with the Anti-Malware blade, the TE blade needs to be enabled, as the TE extension relies on the TE blade to function.