[KB7949] Enable or disable Host-based Intrusion Prevention System (HIPS) in ESET PROTECT, ESET PROTECT On-Prem and ESET Endpoint applications

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform these tasks.
If you are unable to perform the tasks below (the option is unavailable), create a second administrator user in ESET PROTECT or ESET PROTECT On-Prem with all access rights.

Details

Click to expand

The ESET Host-based Intrusion Prevention System (HIPS) is included in ESET Endpoint Security, ESET Endpoint Antivirus, ESET Mail Security for Microsoft Exchange, and ESET File Security for Microsoft Windows Server.

HIPS monitors system activity and uses a pre-defined set of rules to recognize suspicious system behavior. When this type of activity is identified, the HIPS self-defense mechanism stops the offending program or process from carrying out a potentially harmful activity. Changes in the Enable HIPS and Enable Self-Defense settings take effect after the Windows operating system is restarted.

Solution

Related solution: Enable or disable HIPS in ESET home and small office applications for Windows

Manipulation of HIPS rules

By default, HIPS is pre-configured to ensure the maximum protection of your system. While the creation of a HIPS rule might be necessary to resolve an issue in certain situations, manipulation of HIPS rules requires advanced knowledge of applications and operating systems and it is not recommended.

Enable or disable HIPS in ESET PROTECT or ESET PROTECT On-Prem

  1. Open the ESET PROTECT Web Console.

  2. Click Configuration, open the tab Advanced setup to see the Policies side bar, and then select your default policy for clients. Click Actions and then click Edit.

  3. Click Settings, expand the Protections section, and then click HIPS. Click the toggle next to Enable HIPS to enable or disable it.

  4. Click Finish to save your changes.

    Keep HIPS enabled

    We recommend keeping HIPS enabled so that your machines are fully protected.

Enable or disable HIPS on individual client workstations on ESET Endpoint applications (ESET Endpoint Security, ESET Endpoint Antivirus)

Advanced users only

By default, the Host-based Intrusion Prevention System (HIPS) is pre-configured to ensure maximum protection of your system. While the creation of a HIPS rule may be needed to resolve an issue in certain infrequent cases, the manipulation of HIPS rules requires advanced knowledge of applications and operating systems and is not recommended.

  1. Open ESET Endpoint Security or ESET Endpoint Antivirus.

  2. Press the F5 key to access Advanced setup.

  3. Click Protections, click HIPS and click the toggle next to Enable HIPS to enable or disable it.

  4. Click OK and then restart your computer. The change will only take effect after your computer restarts.

    Keep HIPS enabled

    We recommend keeping HIPS enabled so that your machines are fully protected.

Last Updated: Oct 7, 2026

Additional resources

User guides

ESET Forum

YouTube videos
ESET Support News ESET Customer Advisories ESET Status Portal ESET Technical Support

Existing customer?