ZotDefend Cybersecurity Package Installation

These instructions are intended for Engineering faculty, researchers, and staff that manage their own devices, including those in research centers. For Engineering administrative staff in the Dean's Office and academic departments, see the staff instructions.
Only University-owned laptops, desktops, and servers (including those purchased with research grants or gifts) are required to install the cybersecurity packages. Please do not enroll personal devices. Phones and tablets are exempt from the requirement.

Content, Functionality, or Privacy Questions?

Please see the OIT FAQ. If your question isn't answered or if additional information is needed, please contact Engineering IT at security@eng.uci.edu.

Windows Computers

A self-installer is available. The installer enrolls your device and installs the software to meet the cybersecurity requirements in the background. If you aren't comfortable conducting a self-install, please contact Engineering IT at security@eng.uci.edu for assistance. Please include dates/time you are available to meet via remote support.

  1. Download the installer package.
  2. If prompted, sign in using your AD credentials (not necessarily the same as your UCInetID credentials) and complete the Duo prompt. Usually, the username is the same as your UCInetID plus "@ad.uci.edu". If you forgot your password, reset your password using your UCInetID credentials.

    For example, Peter the Anteater would use username "panteater@ad.uci.edu". Replace "panteater" with your AD username, which is usually the same as your UCInetID.

  3. Click the "Download" button and save the installer.
  4. Navigate to the location you saved the installer, and run it. If you receive a security warning, click "Open".
  5. Enter the computer administrator credentials if prompted, or click "Yes" if credentials are not requested. See sample prompts below.

  6. If you receive an error message, please screenshot it and contact Engineering IT at security@eng.uci.edu for assistance. Include the computer name in your email.
    See sample error below.
  7. The installation was successful if you receive no errors or other messages. There will be no success confirmation, so consider installation successful if you receive no confirmation or errors.
    In some cases, installation will appear successful, but may silently fail later. Engineering IT will monitor for these and reach out to assist.
  8. Engineering IT will follow up if anything additional is required, such as enabling antivirus or tweaking settings.

Apple Computers

Contact Engineering IT at security@eng.uci.edu for assistance. Please include dates/time you are available to meet via remote support.

Windows Servers

  1. Download the Nessus agent MSI: NessusAgent-10.8.4-x64.msi
  2. Download the installer batch script: Windows_NessusAgent_ENG.bat
  3. Execute (double click) the installer script "Windows_NessusAgent_ENG.bat" (not the Nessus Agent MSI).
  4. Download the Trellix zip file: Trellix.zip
  5. Unzip the zip file.
  6. Navigate to Trellix\FireEye.
  7. Execute (double click) the Windows_FireEye.bat file.

If you run into any issues or have any questions, contact Engineering IT at security@eng.uci.edu for assistance. Please include dates/time you are available to meet via remote support.

Unix/Linux Computer & Servers

Contact Engineering IT at security@eng.uci.edu for assistance. Please include dates/time you are available to meet via remote support.

If you would like to self-install, instructions are available here.

Exceptions

Engineering IT can grant temporary exceptions for devices that will not support the security package due to operating system version, or due to specialized research needs. These exceptions must be documented. Please submit the exception request form if you believe your device require an exception. Each device requires a separate submission to ensure accurate reporting. If you have many devices, compiling a list with the operating system name and version and a description of each devices use case will expedite the process.

Long term exceptions will be reviewed by OIT security on a case-by-case basis, with approvals for extremely rare cases such as if it completely impedes university work from being done. Below is a non-exhaustive list of currently exempt devices:

  • Cell Phones
  • Tablets
  • IOT Devices
  • Networked cameras
  • Networked webcams
  • Other specialty devices (not laptops, desktops, or servers)
  • Personal devices
  • Devices not on the University network