Protection Feature - Temporary Inactive

[ghunter]

Hello,

We have a number of servers with NOD32 installed with the following features disabled:
-Email Protection
-Web Access Protection

When I look at these servers through the Remote Administration console i can see the status of these features are Temporary inactive. From testing I have concluded that this temporary status means whenever the box is restarted, the features become enabled again.

I would like to know if there is anyway to permanently disable these features so if the box is restarted the features stay off.

regards
Greg

[Marcos]

Could you confirm that the protection modules were disabled via gui manually and not via a configuration xml file?

[ghunter]

Hi Marcos,

They were changed manually via the GUI.

regards
Greg

[Marcos]

On Windows Server 2008, I'd suggest manually renaming C:\WINDOWS\system32\drivers\epfwwfpr.sys in safe mode to prevent potential problems due to a known bug in Windows Filtering Platform that MS is working on.
On other server systems, it should be enough just to disable POP3/HTTP checking in an xml file and push the configuration to the servers.

[ghunter]

Hi Marcos,

We are using Server 2008 R2.

"I'd suggest manually renaming C:\WINDOWS\system32\drivers\epfwwfpr.sys"

Renaming to what?

Regards

[Brambb]

I guess Marcos refers to the following KB article: System is unresponsive with ESET's server security products installed on Windows 2008 Server, SBS 2008 and newer (http://kb.eset.com/esetkb/index?page=content&id=SOLN2567)

[ghunter]

Hi Brambb,

Thanks for that clarification, I understand what needs to be done now. I will test this on my local device but if there is a chance of system instability I will not apply this solution to our live servers.

many thanks
Greg

[Marcos]

-{ Quote: "I will test this on my local device but if there is a chance of system instability I will not apply this solution to our live servers.
" }-
Quite the contrary, the chance of instability will remain as long as the driver is loaded and Microsoft does not release the appropriate hotfix.

[ghunter]

Hi Marcos,

Sorry my apologies, I misinterpreted the article provided by Brambb. I will continue with my testing and hopefully be able to deploy this solution.

Many thanks for all the speedy replies :thumb: