Antivirus addon

[GijsVK94]

i know there is a oppertiunity to deploy endpoint antivirus software but this is still managed in a different dashboard. to keep everything in one place it would be great to see another icon in the dashboard of TRRM for the virusscanner

[silversword411]

What av? You mean just query windows security center to see it's opinion?

[GijsVK94]

to deploy something like bitdefender. what i mean is that if i install the trrm agent on a system the endpoint av will be installed automaticaly. when this is done a icon will be seen (like the Patching pending, pending action, reboot icons) so we also see the notification in the trrm dashboard and not in a different dashboard like gravity zone

[silversword411]

With 50+ av products out in the market there's not a lot TRMM is going to be able to do to support everything.

You can deploy whatever you want now (including av) using the existing scripting capabilities in TRMM

Integration of additional indicators for agents (av or otherwise) will probably be part of whatever https://github.com/amidaware/tacticalrmm/issues/653

tagging system gets implemented.

I can foresee at some point in the future maybe some official av integration with one or several av vendors possibly as part of an extension process similar to other RMM systems.

I'm tempted to close this issue as it's kind of many issues in one, but will leave open for now and let devs decide.

[Sander-VdB]

As an end-user this got me thinking: it would be a nice feature but as TacticalRMM is build around scripts you can kinda get this functionality already:

• create a check to see if the antivirus software is installed
• create a task that installs the antivirus if it is not installed based on previous check
• create a check to see if a virus has been found (or antivirus outdated,not running,...)
• create an alert if a virus was found
• put this all in an automation policy and assign to a client so all devices for that client get it and install the antivirus automatically

That is just missing the nice icon from your request. What would still be nice but might become too cluttered for me. I just respond to alerts or when the general task icon changes color

[joeldeteves]

I think what the poster is referring to is the AV integration that exists in major RMM products like Kaseya and Labtec:

• Sophos
• ESET
• Microsoft
• BitDefender (yuck)
• etc

It's not necessary, sure, but It might expand the interest in TRMM to a wider audience if there was integration with the usual suspects.

@wh1te909: I would certainly consider paying for this as an optional "premium" feature similar to Code Signed agents.

[silversword411]

Yes, I'm sure this will be a long term extension/monetization mechanism :)