How to change LANDESK Host Intrusion Prevention/Endpoint Security Settings

Version 10

    Verified Product Versions

    LANDESK Management Suite 9.5LANDESK Management Suite 9.6LANDESK Management Suite 2016.x

    Description

     

    This article discusses how to deliver changed Host Intrusion Preventions settings to a LANDESK HIPS/Endpoint Security Client:

    There are two scenarios to consider.

    Endpoint Security Settings have merely been updated and the update needs to be propagated to the client.

    -or -

    Endpoint Security settings on the client need to be changed from one HIPS/EPS Setting to another.

     

     

    Scenario 1 - EPS settings update

     

    There are several ways that EPS settings get updated on a client:

     

    1. EPS Settings are updated every time the Vulnerability Scanner(Security Scan) runs on the client.  If EPS changes are not urgent, it is appropriate to wait until the next time the Vulnerability Scanner runs for the EPS settings to get updated.

     

    When the Vulnerability Scanner runs, if the Client UI is enabled you will see the following (or similar) dialogue:

     

    Note: All vulnerability scanner activity logs are stored here:

     

    C:\ProgramData\LANDESK\log

     

    Step 2 - Manually forcing an EPS settings update from the core

     

    An EPS Setting update can be forced by pushing a Change Settings Task.

     

    This option can be used to update existing EPS Settings to the latest revision, or to change from one EPS Setting to another.

     

    In order to set up a change settings task:

     

    1. In the LANDESK Management Suite Console go to 'Tools' > 'Configuration' > 'agent settings'

    2. In the second icon ("Create a task") dropdown select "Change Settings"

    3. Select the desired EPS Setting.  Select the current EPS setting if you simply want to force a revision update, or select a different EPS setting if you want to change from one EPS setting to another.

    5. Click OK, and the Scheduled Tasks dialogue will open.

    6. Drag the desired targets to the task and Schedule it.

     

    Scenario 3 - Manually forcing a HIPS/EPS Setting revision update from the client

     

    From the Run line on the client computer, type "Vulscan /changesettings /showui"

    VulscanSlashChangeSettingsRunLine.png