Prevx3 Enterprise to Webroot SecureAnywhere Enterprise Migration Guide

***Important Notes: You can deploy/install the WSA agent directly over the Prevx3 agent using any of the below methods, doing so will uninstall Prevx3 leaving small traces of residual files, but not affect WSA. It is recommended that you fully uninstall Prevx3 agents using the Prevx3 Remote Deployment Tool.

• WSA Remote Deployment Tool
• Manual install, rename installer .exe with customer key code (XXXX-XXXX-XXXX-XXXX-XXXX.EXE), or via command line
• Install using MSI, GPO or third party software deployment

Creating a Webroot account

Before you can log in to Webroot SecureAnywhere Endpoint Protection, you need to create an account using your license keycode.

To create an account:

1. Open your browser to SecureAnywhere Endpoint Protection. You see the Log in and Create an Account panels
2. Click Sign up now in the Create an Account panel of SecureAnywhere Endpoint Protection
   
   The Create an Account registration page opens.
   
3. Complete the registration information:
   
4. Accept the License Agreement and click Register Now.
   SecureAnywhere Endpoint Protection notifies you that your registration was successful, and sends a confirmation message to the email address you specified.
5. Open your email application and click the link in the confirmation email message, to open the Confirm Registration page
   SecureAnywhere Endpoint Protection requests two randomly selected characters of the security code you specified when you created the account
   
6. Type the requested characters and click Confirm Registration Now.
   Webroot SecureAnywhere Endpoint Protection opens.
   After creating an account and confirming it you can log in to the SecureAnywhere website to view settings for your account and manage endpoints.

Using the Setup Wizard

The first time you log in, the SecureAnywhere Endpoint Protection Setup Wizard opens. The wizard offers three preconfigured policies, to help you get started quickly.

These are the preconfigured policies:

• Recommended Defaults security with protection and automatic threat clean-up.
• Silent Audit scans for threats without user interaction; does not perform a clean-up if threats are found.
• Unmanaged all endpoints will be managed by the end users.

To use the Setup Wizard:

1. In the Setup Wizard panel, open the drop-down menu.
2. Choose a default policy.
   Tip: It's a good idea to choose the Recommended Defaults policy, to ensure that your managed endpoints are protected immediately. You can create new policies and apply them to your managed endpoints after installation.
3. Click Submit
   The Endpoint Protection Status page opens, showing the available deployment options.

WSA Deployment Options

Deploying and Installing WSA agents

Step 1.

Download WSA Endpoint executable from the link sent with your invoice.

OR

Log into the Webroot SecureAnywhere Endpoint Protection Portal and navigate to the Login Drop Down → Downloads (Upper Right Hand Corner)

Installer files for WSA agents .EXE, .MSI and the WSA Remote Deployment Tool installer can be downloaded from here.

Downloading and Running the SecureAnywhere Installer

The Webroot SecureAnywhere installer requires you to enter your keycode, so have it handy before you begin.

To use the Webroot SecureAnywhere installer:

1. On the endpoint endpoint, download the executable file
   http://anywhere.webrootcloudav.com/zerol/wsasme.exe.
2. Enter your keycode
3. Optionally, you can click Change installation options at the bottom of the installation panel and set these options:
   
   • Create a shortcut to Webroot on the desktop
   • Randomize the installed filename to bypass certain infections
   • Protect the Webroot files, processes, and memory from modification
4. Click Agree and Install.
   The installation runs in seconds, and Webroot SecureAnywhere runs an immediate scan on the endpoint endpoint.

Installing using GPO

To install Webroot SecureAnywhere using GPO (Group Policy Object), you must be experienced with Microsoft's Active Directory and the Group Policy Object editor.

To install SecureAnywhere using GPO:

1. Download the SecureAnywhere MSI installer http://anywhere.webrootcloudav.com/zerol/wsasme.msi to a network share, so that it is accessible to all endpoints on which you'll deploy SecureAnywhere.
2. Go to the server that is the domain controller for the group to which you will deploy
3. Open the GPO editor on the domain controller and create a policy for the deployment group.
4. Assign Webroot SecureAnywhere to all endpoints that belong to the Organizational Unit where Group Policy is created.

SecureAnywhere installs on the endpoints in the group when they restart.

Using the SecureAnywhere Remote Deployment tool

The Webroot SecureAnywhere Remote Deployment tool deploys the MSI installer across your network. It supports network discovery, and deployment using IP ranges and hostname lists.

The Remote Deployment tool calls msiexec.exe from the target endpoint, installing the MSI and passing the GUILIC and CMDLINE command values described in Installing using MSI.

The installation is silent, with no interaction. When Webroot SecureAnywhere is installed on the managed endpoint, the Webroot icon appears in the system tray.

Note: The Remote Deployment tool supports deployment only to computers on the same network as the computer from which you are running it.

Supported platforms

The Remote Deployment tool supports:

Windows 7, 32-bit and 64-bit

Windows XP Service Pack 3, 32-bit and 64-bit

Windows Vista, 32-bit and 64-bit

Windows 2003 and 2008 server platforms

Requirements

Ensure that these requirements are met before you use the Remote Deployment tool:

• Network Discovery must be enabled
• Simple File Sharing must be disabled for Windows XP systems.
• Note that XP Home is not supported, because you cannot disable Simple File Sharing on that operating system.
• Remote Registry Service must be enabled and running.
• The credentials to be used during deployment must have access to the admin$ share of the target computer.
• The target computer must be discoverable and accessible within the same domain as the computer from which you are deploying.

Note: Firewalls must be configured to allow all of these requirements.

Running the Webroot SecureAnywhere Remote Deployment tool

Before you begin, ensure that the system meets the Requirements.

To use the Webroot SecureAnywhere Remote Deployment tool:

1. On the endpoint from which you will run the deployment, download and run the Webroot SecureAnywhere Remote Deployment tool.
2. Click Next in the setup window.
3. Review the license agreement, click Accept, then click Finish to install the tool.
   The Webroot SecureAnywhere Endpoint Protection deployment tool is now accessible from your Start menu.
4. Go to Start > All Programs > WSAE Deployment Tool and click Webroot Deployment Tool to begin the deployment
5. Accept the usage terms and conditions on the Welcome page and click Next.
6. In the User Credentials panel, enter the default user name and password of the administrative account that will be used on all endpoints in the network, and optionally, the network domain.
7. Click Next to open the Installer File panel.
8. Type the installer location, or browse to it.
   Note: If you don't yet have the installer, you can download it from the Webroot SecureAnywhere Endpoint Protection Downloads page.
9. Enter your keycode.
   Optionally, you can click Advanced Options to specify MSI command-line arguments.
10. Click Next to choose the method of deployment:
    
    • Use Windows Network discovery Let SecureAnywhere Endpoint Protection automatically discover the endpoints in your network
    • Selective deployment to an IP range Specify a range of IPs for deployment.
    • Selective deployment to a list of hostnames Enter host names for deployment. Separate the host names with a new line
11. Click Next after selecting the deployment method
    The Remote Deployment panel opens, listing the endpoints for deployment.
12. Right-click an endpoint in the list to deploy Webroot SecureAnywhere to it, to change the user name and password, to refresh the list, or to reboot the endpoint.
13. Click Finish to complete the deployment.

Uninstalling Prevx3 Clients from the Prevx Remote Deployment Wizard

All workstations should be uninstalled before the Admin Console/Server machine is decommissioned/uninstalled. This can be done either manually from the clients Add/Remove Programs or with the instructions below using the Prevx3 Remote Deployment/Uninstall Wizard below.

***Note: The below method will fully uninstall the Prevx3 Agent from your endpoint

Step 1

Run the Prevx Remote Deployment/Uninstall Wizard, either from the Prevx3 Enterprise Console, via Deploy More Agents, or from the Windows Programs Menu.

Step 2

Enter your network credentials

Step 3

Supply path to Prevx3 agent msi file for unistall

Step 4

Select agents you would like to uninstall, right click → Uninstall Agent → Finish

Step 5

Click “Refresh All States” to verify uninstall.