Email Notification

[ktechno1]

I would like to request the feature in Premium for email notifications.  In the event that a daily scan detects or quarantines something, I'd like to get an email notfication of that report, similar to the Endpoint Protection product.

Is this a feature that Premium could add?  Daily automatic definition updates and system scans are great, but it would be nice to know if and when those scans actually yield a positive result that would re-enforce the value that the product is providing.  All my clients ask about it, and it would be great to be able to point to those timestamped email reports.

[exile360]

Greetings,

Unfortunately this functionality is not available or planned for the consumer product to my knowledge, however if you are an MSP dealing with business clients then I do believe this option is available.  I will submit a request for this feature in the consumer version, however I doubt they will add it given the fact that the user is alerted whenever anything is detected by real-time protection or scans (including scheduled scans) within the client software itself.

[ktechno1]

4 hours ago, exile360 said:

Greetings,

Unfortunately this functionality is not available or planned for the consumer product to my knowledge, however if you are an MSP dealing with business clients then I do believe this option is available.  I will submit a request for this feature in the consumer version, however I doubt they will add it given the fact that the user is alerted whenever anything is detected by real-time protection or scans (including scheduled scans) within the client software itself.

I had a user at a client office that did not get any real-time notification during normal daily use, but when I checked the scan reports on that installation, I could see that night when the scheduled scan ran, that Trojan files and folders were detected and removed.  But again, I had to manually get on that PC, and LOOK inside the program to find that report... It would be nice if it would email me post-scan and removal when it occurs.  I understand that the Endpoint Protection suite does this, but again, this client only has a few systems, and does not run a dedicated Server-level OS that requires the business-grade products.

[exile360]

Have you looked into the MSP version?  I believe it provides the functionality you're requesting and doesn't require the server/cloud components and is designed for use on standard endpoint/client operating systems/Windows versions.  You should speak with your Malwarebytes sales rep/account manager, but I believe it is basically like the Endpoint Protection product, but just with the endpoint client software and the monitoring and management features for you, the MSP/support provider to monitor and support your clients without the need for an on-premises server so it can be used across standard endpoints without the need for a centralized corporate network infrastructure or server to manage them.  You'd get the alerts via email and you could check status remotely at any time by logging into the cloud management interface and you wouldn't need to remote into your clients' endpoints either, but you'd still be able to track their status for detections, updates, scans, product versions, protection status etc. whenever you wanted using pretty much any web browser, even from a smart phone if you wanted.

[exile360]

By the way, the Endpoint Protection product is actually designed for scenarios like this where you have fewer clients to manage and don't want/don't have a centralized server; it's all done through the cloud so you just log in to a webpage in a browser to monitor and manage them as I mentioned.

You can learn more about it here as well as here (Malwarebytes Endpoint Protection, the second item listed, located in the center).  It doesn't rely on a centralized network infrastructure or server; it's basically the best of both worlds with the flexibility of the standalone/consumer product with many of the manageability and monitoring features of the enterprise product without all the server/client overhead enabling you to monitor and manage your customers without needing to maintain a server or perform complex deployments.  In fact, I believe you just have them download a special build of the product that Malwarebytes gives you a link for and it automatically adds the endpoint to your group of managed devices.  The full user guide is located here.

[exile360]

Yes, as I understand it using the consumer version in a small business environment is just fine, however anyone from the staff may correct me on that if I am wrong.

My point was that, as an MSP, which it appears is essentially the role you're taking on for your clients, it may be beneficial to use one of the cloud managed solutions aimed at that particular use case since it not only has the feature you're requesting, but many other tools and advantages that should suit your needs and those of your clients, yet still retains the flexibility of being deployed without the need for any servers or centrally managed systems as it all works through a web browser online giving you the freedom to monitor and manage your clients' installations without having to remote in or use heavy installation scripts, custom tools or a discrete server on the network to do so.

[AlexSmith]

@ktechno1 I like the idea, especially for unmanaged small business clients (or small-sized lightly-managed in some cases) that you and other Techbench partners work with. I'll connect with @exile360 to bubble it up to the greater Malwarebytes product team.

With that being said, @exile360 does bring up some good points that you can get this functionality today with our new Malwarebytes OneView console and the Malwarebytes Endpoint Protection. Both of these are options to you via your Techbench partnership, just hit up your account manager for details.

Edited June 6, 2019 by AlexSmith

[exile360]

Yes, I'll definitely be providing this feedback/suggestion to the Product team for consideration, and I don't want it to seem as though it is an impossibility for this feature to be added, I just figured that with the existing functionality of Malwarebytes' cloud solutions that they may be able to fill this need without having to wait on a consumer based solution and there would be no need for any kind of managed server or on-premises solution.

Thank you for the assist Alex, and thank you ktechno1 for the feedback/suggestion  

[ktechno1]

I appreciate the feedback, @exile360 and @AlexSmith. 

First, with Endpoint Protection, it **requires** a minimum of 10 licenses, and for most SOHO type end clients, that is just too many.  Most of these small businesses run with less than 10 (and sometimes just 2 or 3) employees on PCs, so that makes the EP product with the cloud console out of reach from a financial standpoint.  Don't get me wrong--I absolutely LOVE the EP product itself, along with the Cloud Console aspect.  But there are a ton of small-needs "business/office" grade clients who simply do not want to spend $700 ($70 MSRP x 10 seats) for the software alone, and I understand that.

Secondly, with the new OneView product, if I understand correctly, will only integrate using one of the other business-grade products such as EP or Incident Response--but NOT the Premium product.  If that is accurate, then that still leaves those clients whose budget is < $100 to cover their all their office PCs using a MWB product, without email notifications...

If there is a product that is similar to Premium in cost, where you can purchase license quantities below 10, that has email notificiations, I'd love to learn more.

Thanks for your time and open discourse.

 

[exile360]

I see, thanks for the additional details.  I will also suggest they provide some kind of managed offering for those kinds of situations where the number of endpoints is less than 10.  For someone in your business it would make sense to have the ability to manage multiple smaller clients in a single interface (assuming that would be acceptable from a security perspective, like having a separate group/section or tab for each client/group without having to login to a separate instance of the console/cloud platform for each one as that would be a lot of credentials for you to keep track of).

If it were possible, would such a solution suit your needs?

[ktechno1]

13 minutes ago, exile360 said:

I see, thanks for the additional details.  I will also suggest they provide some kind of managed offering for those kinds of situations where the number of endpoints is less than 10.  For someone in your business it would make sense to have the ability to manage multiple smaller clients in a single interface (assuming that would be acceptable from a security perspective, like having a separate group/section or tab for each client/group without having to login to a separate instance of the console/cloud platform for each one as that would be a lot of credentials for you to keep track of).

If it were possible, would such a solution suit your needs?

Yes, I think that would.  But that isn't really necessary.  I don't need to have the capability to manage any of all of these Premium-based clients in a single interface... I'd just like to see an email of their product (Premium in these scenarios) actually detects and quarantines.  You can always CC that notification from the client to the MSP, in this case, myself, to then remotely connect and charge PER INCIDENT if more remediation is required.  But aside from their investment for the Premium product, I (as the MSP provider) would not want to pay an additonal cost for a console solution for these types of clients, and I wouldn't be able to pass that cost on to them, obviously...

[exile360]

9 minutes ago, ktechno1 said:

Yes, I think that would.  But that isn't really necessary.  I don't need to have the capability to manage any of all of these Premium-based clients in a single interface... I'd just like to see an email of their product (Premium in these scenarios) actually detects and quarantines.  You can always CC that notification from the client to the MSP, in this case, myself, to then remotely connect and charge PER INCIDENT if more remediation is required.  But aside from their investment for the Premium product, I (as the MSP provider) would not want to pay an additonal cost for a console solution for these types of clients, and I wouldn't be able to pass that cost on to them, obviously...

I can understand what you're saying, but at the same time, the usefulness of this feature for vanilla consumer users seems very limited.  I have no idea what it would cost to develop and roll out this kind of functionality, but I know they wouldn't want to devote the resources to it for all Premium users just to suit a handful of special use cases like this.  Putting cost aside for a moment, let's assume that the price would be the same, maybe slightly more; would it be acceptable if they provided a special build for MSP's that had this capability but not necessarily with all the cloud functionality and remote management stuff?  Basically just a special 'support provider' type version where it essentially just does what you said, notifying you via email any time there is a detection, maybe with something like a regular weekly or monthly report/summary just to check in on each of your clients and see how things have gone/make sure the product is still doing its job etc.?

[ktechno1]

31 minutes ago, exile360 said:

I can understand what you're saying, but at the same time, the usefulness of this feature for vanilla consumer users seems very limited.  I have no idea what it would cost to develop and roll out this kind of functionality, but I know they wouldn't want to devote the resources to it for all Premium users just to suit a handful of special use cases like this.  Putting cost aside for a moment, let's assume that the price would be the same, maybe slightly more; would it be acceptable if they provided a special build for MSP's that had this capability but not necessarily with all the cloud functionality and remote management stuff?  Basically just a special 'support provider' type version where it essentially just does what you said, notifying you via email any time there is a detection, maybe with something like a regular weekly or monthly report/summary just to check in on each of your clients and see how things have gone/make sure the product is still doing its job etc.?

Yes, absolutely that would be wonderful.

[exile360]

Cool, I'll recommend it to the Product team then

Obviously I have no say in things; I just pass the feedback/ideas along to them and they make the decisions, but at least your voice will be heard, and hopefully they will choose to act on it (particularly since I think it's a really good idea too).