HIPSHost Intrusion Prevention System ESET

If the HIPS module is enabled in the ESET antivirus, the Impero Host does not start.

The following error is displayed in Event Viewer: “Attempt to load Impero from file returned error 21 on Terminal 1”.

 

To use the Netop Host with ESET antivirus, you can:

  • Disable the HIPS module
  • Add Netop Host to the ESET HIPS module

To disable the HIPS module, proceed as follows:

1. Open ESET antivirus.

2. Click on the toggle button to disable the HIPS module.

 

    NOTE: You must restart your device for the settings to take effect.

To add the Impero Host to the ESET HIPS module, proceed as follows:

1. Open ESET antivirus.

2. Click on the Advanced settings button.

 

3. In the DEEP BEHAVIORAL INSPECTIONS > Exclusions area, click on the Edit button to add the Impero Host folder as an Exclusion.

 

4. In the HIPS SETTINGS > Rules area, click on the Edit button.

 

5. Click on the Add button.

 

6. In the Operations affecting area, enable the following options by clicking on the toggle button:

      i.    Target files

     ii.    Applications

    iii.    Registry entries

 

7. Click on Next.

 

8. Click on the Add button.

 

9. Specify the NHSTW32.EXE file location.

10. Click on Next.

 

11. Click on the Add button.

 

12. Specify the Impero Host folder location.

13. Click on Next.

 

14. Click on OK.

NOTE: It is necessary that you restart your device for the settings to take effect.

For more information on how to mass deploy the settings and rules to multiple devices, refer to the following link from ESET.