Endpoint Security Dasboard, Self Protection Technology is off, while set on by common policy

[polezhaevdmi]

Sorry for disturbance, is it possible to clarify the 'Endpoint Security Self Protection Technology' term usage in Dashboard? How it is coupled with ENS products properties and policies? 

Issue description:

• The ePO Endpoint Security Dashboard reports the 'Self Protection Technology' is not used across protected systems (look at the screenshot);
• The Common ENS policy / advanced section sets the 'self protection' enabled (screenshot), it inherits to all organization containers (screenshot);
• At the particular machine level the policy propagation is visible (screenshot);
• The deployed ENS product in properties reports the compliancy (screenshot).

The questions are:

• Am I setting the correct policy to control the same 'self protection', the dashboard checks?
• What else might block the self protection (if it appeared blocked)?
• How I should switch the 'self protection technology' on to be recognizable by 'Dashboard reporter'?
• Which criteria I must take into account to decide whether the self protection is necessary for my environment (VDI stations for remote common everyday usage)?

Thank You!

[alaskar · Accepted solution]

Hi @polezhaevdmi 
The Dashboard is fine. The mere work of the Dashboard is to present the system variables as reported to EPO.
In your case, there are 3 systems which shows not enabled and are windows systems with ENS 10.7 loaded.
such issues need a remote session to validate the local console and if there are any reporting issues.
I would suggest check the local ENS console on those systems and see if the self-protection is enabled. If Yes, best would be to open a support case and we can check it on a remote session.

Hope this helps!

[polezhaevdmi]

Thanks for the hint, @alaskar, the ENS console displays the self protection is enabled (screenshot). I will collect MER at ePO machine and continue with support. Cheers!

[polezhaevdmi]

Update: the issue seems appeared not simple, but was self-resolved after the procedure, listed below.

- Re-applied cumulative update 6 to ePO and re-started the ePO virtual machine;

- Prepared a ePO client task to remove ENS on client;

- Moved all endpoints to Lost&Found group (to stop auto-deploy on them);

- Removed ENS by task running;

- Re-installed agent on endpoints using 'force' install option;

- Moved all endpoints to their appropriate groups to allow Product Deployment to process them;

- Wait for deploy and update to complete.

Result: all processed stations reporting on dashboard the self-protection technology is active. Success.