Performing Push Operations

Push Operations are operations that the Endpoint Security Management Server A Security Management Server that manages your Endpoint Security environment. Includes the Endpoint Security policy management and databases. It communicates with endpoint clients to update their components, policies, and protection data. pushes directly to client computers with no policy installation required.

To add a Push Operation:

1. Go to the Push Operation view and click Add.

2. Select the required operation and click Next.

   Available Push Operations

   • Anti-Malware

     • Scan for Malware - Runs an Anti-Malware A component of the Endpoint Security client that protects against known and unknown viruses, worms, Trojan horses, adware, and keystroke loggers. scan on the computer or computers, based on the configured settings.

     • Update Malware Signature Database - Updates malware signatures on the computer or computers, based on the configured settings.

     • Restore Files from Quarantine - Restores files from quarantine on the computer or computers, based on the configured settings.

   • Forensics and Remediation

     • Analyze by Indicator - Manually triggers collection of forensics data for an endpoint device that accesses or executes the indicator. The indicator can be a URL, an IP, a path, a file name or an MD5.

     • File Remediation - Quarantines malicious files and remediates them as necessary.

     • Isolate Computer - Makes it possible to isolate a specific device that is under malware attack and poses a risk of propagation. This action can be applied on one or more devices. The Firewall component must be installed on the client in order to perform isolation.

     • Release Computer - Removes device from isolation. This action can be applied on one or more devices.

   • Agent Settings

     • Deploy New Agents - Installs the Initial Client remotely without third party tools such as Microsoft System Center Configuration Manager (SCCM) or Intune. The Push Operation mechanism extends to devices that do not have the Initial Client installed yet.

     • Collect Client Logs - Collects logs from a device or devices based on the configured settings. Logs are stored in a shared folder on the client computer.

     • Repair Client - Repairs the Endpoint Security client installation. This requires a computer restart.

     • Shutdown Computer - Shuts down the computer or computers based on the configured settings.

     • Restart Computer - Restarts the computer or computers based on the configured settings.

     • Uninstall Client - Uninstalls the Endpoint Security client remotely on the selected devices. This feature is supported for E84.30 client and above.

3. Select the devices on which you want to perform the push operation.

4. Click Next.

5. Configure the operation settings.

6. Click Finish.

Notes: See the results of the operations on each endpoint in the Endpoint List section at the bottom part of the screen. You can push operations from the Computer Management view as well - select the required device and click Push Operation.