Configuring Webroot Endpoint Protection

NAVIGATION   Modules > Endpoint Protection > License

SECURITY  Endpoint Protection > View Policy

SECURITY  Endpoint Protection > Edit Policy

You can leverage Webroot Antivirus to protect your endpoints against malware through its integration with VSA 10.

This article describes the steps to do so.

How to...

Before you can start protecting your managed systems with Webroot, you'll need to activate your license. To do so, perform the following steps:

  1. From the left navigation menu in VSA 10, navigate to Endpoint Protection > License.

  2. In the Webroot License Information section of the page, click Activate Trial.

  3. You'll receive a welcome email that includes a registration and account activation link for your Webroot Management Console.

    NOTE  It may take up to one hour for this email to arrive.

  4. Complete the registration process.

  5. Make a note of your Webroot Management Console URL. Then, proceed to the next section of this article.

Next, you'll need to create policies and sites in the Webroot Management Console.

  • Policies instruct Webroot how to search for and address suspected malware on your endpoints.

  • Sites enable you to easily find and manage your devices. They can represent a business, a location within a business, or a collection of devices you would like to manage as a group.

To create your policies and sites, log in to your Webroot Management Console. Then, perform the following steps:

  1. Follow the steps described in Webroot's administration guide to create your endpoint protection policies.

  2. Next, perform the steps in this Webroot article to create your sites.

  3. Make a note of your site keycode as described in Finding your keycode.

  4. Proceed to the next section of this article.

Once you've finished creating your policies and sites, you'll be able to install the Webroot client on the endpoints you'd like to protect. Perform the following steps to do so:

  1. From the left navigation menu in VSA 10, navigate to Endpoint Protection > Agents Status.

  2. Select Antivirus from the top navigation bar.

  3. Use the Search by System field to filter the page to the device or devices you'd like to manage.

  1. Click Actions > Install to apply the policy to all eligible devices in the current view. To apply the policy to an individual device, move your mouse over its list entry and click the icon that appears.

  2. The Antivirus Install modal will open. Select Webroot from the Antivirus Engine drop-down menu and enter the Site Key Code value you noted in the Create the Webroot policies and sites section of this article.

  3. Click Install. Webroot protection will enable for all of the systems you selected. To learn how to leverage Webroot's features, proceed to the next sction of this article.

With Webroot installed on a protected system, you'll be able to deploy several different actions to it via the device list via Endpoint Protection > Agents Status. To do so, perform the following steps:

  1. From the left navigation menu in VSA 10, navigate to Endpoint Protection > Agents Status.

  2. Select Antivirus from the top navigation bar.

  3. Use the Search by System field to filter the page to the device or devices you'd like to manage.

  1. Move your mouse over any online Webroot-enabled device in the list or click the Actions menu to reveal the following features:

    Feature nameDefinition
    Deep ScanBegins a Webroot scan on the selected endpoint or endpoints; does not automatically quarantine files suspected to be malicious
    Clean UpStarts a Webroot scan on the selected endpoint or endpoints; automatically quarantines files suspected to be malicious
    UninstallRemoves Webroot from the selected endpoint or endpoints

  2. Once you've deployed the action, it will attempt to execute immediately.

If Webroot detects a suspected threat on a protected system, you'll receive an alert in the Notifications section of VSA 10's top navigation bar. You can also review the details of the threat via Endpoint Protection > Events > Active Threat . To respond to the threat, do the following:

  1. From the left navigation menu in VSA 10, navigate to Endpoint Protection > Agents Status.

  2. Select Antivirus from the top navigation bar.

  3. Use the Search by System field to filter the page to the device or devices you'd like to manage.

  1. Look for any systems with a status of Infected.

  2. Move your mouse over any online Webroot-enabled device in the list or click the Actions menu and click Clean Up.

  3. When the quarantine process completes, you can view its outcome via Endpoint Protection > Events.