Turning off or disabling ENS to install applications on Servers and Desktops

[User27605043]

I am curious if there is a best practice guide for this process.

Most Application installs suggest disabling AV prior to installation. What is the recommend process for ENS and application installs.

It seems pretty simple with VSE, but not sure best process for this with ENS.

Thanks!

[mbuehler · Accepted solution]

Hi @User27605043 

Though you should not have to disable ENS for application installs, and it would not be recommended from a security perspective to do so, it is certainly something that you can do fairly easily.

To disable On-Access Scanning during the install locally it would be required to open the McAfee Endpoint Security Console, open Threat Prevention settings, and remove the checkbox next to On-Access Scan and click "Apply". This will temporarily disable OAS until next policy enforcement occurs.

[User27605043]

Only On-Access Scan? Why not also Access Protection and Exploit Prevention as well?

Thanks.

[mbuehler]

Hi @User27605043 

You can certainly disable those components as well - I simply used OAS as an example, rather as this is usually one of the more impactful components of ENS to sensitive applications.

[User27605043]

One more question. Where do I set in ePO for auto re-enable of ENS features if they forget to recheck the box?

[mbuehler]

Hi @User27605043 

ePO's default configuration will be for ePO Policy to override local settings at each policy enforcement interval. So each time the McAfee Agent enforces policy (typical interval is between 15 minutes and 60 minutes) the ENS settings will be reverted to their enabled state that you have configured in policy.