Malwarebytes On-Premise to Cloud Migration: Upgrading Endpoint Security to Endpoint Protection
Malwarebytes recommend that you setup your environment by following each ordered step:
1. Policies | 2. Exclusions | 3. Add endpoint groups | 4. Add endpoints | 5. Scheduled endpoint scans | 6. Users | 7. Email notifications | 8. Syslog | 9. Network proxy.
1. Policies
A policy defines the security settings for the endpoint (e.g executing a scheduled scan, type of scan, applying real-time protection, or enabling Anomaly Detection Machine Learning.)
Note policy configurations in Malwarebytes Management Console
- Select Policy on the left pane of the Malwarebytes Management Console app window.
- Double-click any policies you wish to move to Malwarebytes Endpoint Protection and note the following configurations for each:
- General
- Protection
- Scanner
- Scheduler
- Updater
- Communication
- Anti-Exploit
- Anti-Ransomware (with Exclusion List)
- Login to the Malwarebytes cloud console
- Click Add to create a new policy for each policy you wish to migrate from Malwarebytes Endpoint Security to Malwarebytes Endpoint Protection.
2. Exclusions
Option 1: Migrate exclusions with Malwarebytes Cloud Excel Add-In
Use the Malwarebytes community utility Malwarebytes Cloud Excel Add-In to automate the conversion.
- Once the MSI file is downloaded, open Excel and go to Malwarebytes > Misc Functions > Load Exclusions.
- Select Import from Malwarebytes Endpoint Security.
Option 2: Manually migrate exclusions
In Malwarebytes Endpoint Security, exclusions are established per policy. In Malwarebytes Endpoint Protection, exclusions are applied on a global basis.
Take note of each exclusion found in the following policy tabs of Malwarebytes Endpoint Security:
Ignore List – Malwarebytes Anti-MalwareAnti-Exploit Exclusion List
Anti-Ransomware (with Exclusion List)
Manually add those exclusions to Malwarebytes Endpoint Protection
You can do this under Settings > Exclusions > Add.
3. Add endpoint groups
Option 1: Sync Active Directory
Synchronise the Active Directory structure with Malwarebytes Endpoint Protection groups. See Download the Malwarebytes Discovery and Deployment Tool for download instructions.
- Open the Tool & select Active Directory Import.
- Select all Organisational Units you wish to import.
- Endpoints are automatically placed into the Active Directory group structure.
Option 2: Preserve groupings of endpoints in Malwarebytes Endpoint Security
Install Malwarebytes Endpoint Security Excel Add-In.
- Open Excel, select Malwarebytes Endpoint Security login > Client Computers.
- Use the generated list to create groups & add the endpoints: IP Address, GroupName, PolicyName.
- In Malwarebytes Endpoint protection, create new groups & select the policies desired for each new group. Go to Settings>Groups>New.
Option 3: Start over from scratch
Settings > Groups > New.
4. Add endpoints
Option 1: Use a software distribution method
After installing the Endpoint Agent, endpoints show up in the Default Group. You can then manually move endpoints to another group. Automatically assign endpoints to groups during the installation process by:
- Automatically assign endpoints to a group during installation by specifying the corresponding Group ID. Go to Settings > Groups and create a new group structure.
- Find Group ID within the cloud console and going to Endpoints > Add Endpoints > Managed Endpoint Installers > How to Automatically Specify Group Assignment.
Option 2: Use Malwarebytes Discovery and Deployment Tool
- In the Malwarebytes cloud console, go to Endpoints > Add Endpoints > Download Malwarebytes Discovery and Deployment Tool.
- See Malwarebytes Cloud Console Administrator Guide and Malwarebytes Endpoint Protection quick start installation for detailed install and use information.
- All endpoints show up in the Malwarebytes cloud console in the Default Group. Manually move endpoints to other groups if desired.
5. Scheduled endpoint scans
- Review & document schedules in Malwarebytes Endpoint Security.(Date/time, functions performed, scheduled groups)
- Enter it into Malwarebytes Endpoint Protection to create new scheduled scans.
- Create a spreadsheet to map previous settings to Malwarebytes Endpoint Protection.
6. Users
- Gather information on existing Users (also known as administrators) from Malwarebytes Endpoint Security.
- Create new users in the Malwarebytes cloud console. Go to Settings > Users > New.
Malwarebytes Endpoint Protection: Super Admin, Administrator, Users.
7. Email notifications
When using Malwarebytes Endpoint Protection, each user configures their own preferences for notifications. There is no global setting to enable all users to receive the same notifications. There is no need to configure an SMTP server, by clicking User Name > Profile > Notifications in the upper-right of the webpage and checking the desired boxes.
8. Syslog
- In the Malwarebytes cloud console, select Settings > Syslog Logging.
- Select one ‘always on’ endpoint that resides within the local area network that has access to the Syslog Server.
- Select Add and enter the requested information to match the Syslog Server.
9. Network proxy
Use one of the following two methods to add a network proxy.
Add network proxy via command line option during installation
msiexec /quiet /i Setup.MBEndpointAgent.msi NEBULA_PROXY_SERVER=http://<IP> NEBULA_PROXY_PORT=<port> GROUP=<group_ID>
Use Malwarebytes Discovery and Deployment Tool
A Proxy Settings button is at the lower right corner of the login screen, needed when a proxy server is required to access the Internet.
Click Proxy Settings to enter proxy specifications. No settings are enabled until Use Proxy is checked, and settings are ignored if Use Proxy is unchecked.
After installation via Command line on each endpoint
MBCloudEA.exe -proxy.server <IP> -proxy.port <port> -proxy.user <domainuser> -proxy.password <password>
Upgrade today!
Considering upgrading? Check out our Malwarebytes Product Comparison Guide or check out the complete Malwarebytes solution, Malwarebytes Endpoint Protection & Response.
Don’t have Malwarebytes and unsure on how protected you really are? Try Malwarebytes FREE for 30-days with the Malwarebytes FREE Trial or request a FREE threat assessment report on your current AV.
































