Exploit Prevention alert is triggered even if it is disabled after importing Endpoint Security settings with the ESConfig tool

Technical Articles ID: KB92387
Last Modified: 2023-02-07 16:46:39 Etc/GMT

Environment

Endpoint Security (ENS) Threat Prevention 10.7.x, 10.6.x

Problem

An Exploit Prevention alert is triggered, even if it is disabled, after you import ENS settings with the ESConfig tool.

The issue occurs when you disable Exploit Prevention when you import the settings with the ESConfig tool. The issue does not occur when you disable Exploit Prevention manually using the ENS Client or policy enforcement from ePolicy Orchestrator.

Solution

This issue is resolved in ENS 10.6.1 July 2020 Update and ENS 10.7.0 July 2020 Update.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Workaround

Reboot the operating system after you import the ENS settings with the ESConfig tool. After the reboot, Exploit Prevention alerts are not triggered if they are disabled.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Exploit Prevention alert is triggered even if it is disabled after importing Endpoint Security settings with the ESConfig tool

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Exploit Prevention alert is triggered even if it is disabled after importing Endpoint Security settings with the ESConfig tool

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title