Recommended settings for ESET File Security on a Terminal Server
KB Solution ID: SOLN2791|Last Revised: June 24, 2013Solution
Complete the procedures below in sequence to achieve the best performance from your server with ESET File Security for Microsoft Windows Server installed. For licensing questions, contact ESET Sales at +1 (619) 876-5400.
I. Disable the graphic user interface (GUI)
The steps in this section will disable the GUI from launching automatically at start up, however you can still access it at any time from the Start menu. If you are not comfortable making changes in the registry, you can also use the method for endpoint workstations covered in the Knowledgebase article below:
- Press the Windows key + R to open a run dialog.
- Type Regedit.exe into the Run field and press ENTER.
- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run.
- Right-click the value egui and select Modify.
Figure 1-1
Click the image to view larger in new window
- Add the
/terminalswitch to the end of the existing string
The following is an example of the Value data of egui:
"C:\Program Files\ESET\ESET File Security\egui.exe" /hide /waitservice /terminal
Figure 1-2
If you want to revert this setting and enable automatic start up of the ESET File Security GUI, remove the /terminal switch. To navigate to the egui registry value, repeat steps 1 to 3.
II. Enable Protocol Filtering
- Open ESET File Security by clicking Start
All Programs ESET ESET File Security ESET File Security. - Press F5 to open Setup.
- Expand Computer protection Antivirus and antispyware Protocol filtering.
- Select the check boxes next to Enable application protocol content filtering and Start application protocol protection automatically.
Figure 2-1
Click the image to view larger in new window
- Click OK to save your changes.
III. Enable passive Web access protection
- Open ESET File Security by clicking Start All Programs ESET ESET File Security ESET File Security.
- Press F5 to open Setup.
- Expand Computer protection Antivirus and antispyware Web access protection.
- Make sure that the check box next to Enable web access antivirus and antispyware protection is selected. If you are using Windows Server 2008 or newer, skip to part V. If you are using Windows Server 2003, continue as normal.
Figure 3-1
Click the image to view larger in new window
- Expand Computer Protection Antivirus and antispyware Web access protection HTTP, HTTPS Web browsers.
- Click Add.
- Navigate to the .exe files for any web browsers that you want to run Web access protection on and click Open (we recommend that you enable this feature for all web browsers).
Figure 3-2
Click the image to view larger in new window
- When you have finished adding browsers, click OK.
IV. Enable active Web access protection – WINDOWS SERVER 2003 ONLY
- Open ESET File Security by clicking Start All Programs ESET ESET File Security ESET File Security.
- Press F5 to open Setup.
- Expand Computer protection Antivirus and antispyware Web access protection HTTP, HTTPS Web browsers Active mode.
- Select the corresponding check boxes for each of the web browsers listed to enable active Web Access protection. If a browser is not included in the list, repeat the steps from section III above to add it.
Figure 4-1
Click the image to view larger in new window
V. Adjust the number of Scanning Engines
If there are no other restrictions on system resources, we recommend that you increase the number of ThreatSense scanning engines to improve performance.
- Open ESET File Security by clicking Start All Programs ESET ESET File Security ESET File Security.
- Press F5 to open Setup.
- Expand Computer protection Antivirus and antispyware Performance.
- Set the Number of ThreatSense scan engines field to equal twice the number of physical CPUs that your server has plus one. For example, a server with four physical CPUs would have nine scan engines running. You will be notified by ESET that you must restart your computer before these changes will take effect. Click OK once you are finished to close Setup.
