Protection Feature - Temporary Inactive

[ghunter]

Hello,

We have a number of servers with NOD32 installed with the following features disabled:
-Email Protection
-Web Access Protection

When I look at these servers through the Remote Administration console i can see the status of these features are Temporary inactive. From testing I have concluded that this temporary status means whenever the box is restarted, the features become enabled again.

I would like to know if there is anyway to permanently disable these features so if the box is restarted the features stay off.

regards
Greg

[Marcos]

Could you confirm that the protection modules were disabled via gui manually and not via a configuration xml file?

[ghunter]

Hi Marcos,

They were changed manually via the GUI.

regards
Greg

[Marcos]

On Windows Server 2008, I'd suggest manually renaming C:\WINDOWS\system32\drivers\epfwwfpr.sys in safe mode to prevent potential problems due to a known bug in Windows Filtering Platform that MS is working on.
On other server systems, it should be enough just to disable POP3/HTTP checking in an xml file and push the configuration to the servers.

[ghunter]

Hi Marcos,

We are using Server 2008 R2.

"I'd suggest manually renaming C:\WINDOWS\system32\drivers\epfwwfpr.sys"

Renaming to what?

Regards

[Brambb]

I guess Marcos refers to the following KB article: System is unresponsive with ESET's server security products installed on Windows 2008 Server, SBS 2008 and newer

[ghunter]

Hi Brambb,

Thanks for that clarification, I understand what needs to be done now. I will test this on my local device but if there is a chance of system instability I will not apply this solution to our live servers.

many thanks
Greg

[Marcos]

Originally Posted by ghunter

I will test this on my local device but if there is a chance of system instability I will not apply this solution to our live servers.

Quite the contrary, the chance of instability will remain as long as the driver is loaded and Microsoft does not release the appropriate hotfix.

[ghunter]

Hi Marcos,

Sorry my apologies, I misinterpreted the article provided by Brambb. I will continue with my testing and hopefully be able to deploy this solution.

Many thanks for all the speedy replies