Marcos

You cannot update v7 from a mirror created by v5. As I have stated, you can update v7 from a mirror created by another v7 (or latest 6.6) product or by the Mirror tool.

Please supply the logs I asked for.

Just out of curiosity, did you try continuing with an empty password?

The fact that you use dual update profiles and one of them uses a proxy complicates things. Does the error occur only when update is downloaded in the corporate network through the http proxy or when updating outside the network or in either case? To start off, enable advanced update engine and network protocol logging in the advanced setup -> tools -> diagnostics, reproduce the error, stop logging and gather logs with ESET Log Collector.

My suggestions: 1, Don't t specify anything in the Remote section. You don't want to block incoming communication only from the Trusted zone but from the Internet as well. 2, Block communication in both directions, ie. incoming and outgoing, not just incoming communication. 3, Create a permissive rule for communication with the ESMC server and possibly with ESET's servers as well so that updates can be downloaded and LiveGrid data retrieved (see https://support.eset.com/kb332/) and put it on top of the rules list to take precedence over the blocking rules. 4, Consider creating similar rules for other protocols, such as ICMP too.

If there is at least one machine in the network with Internet connection that the other machines can connect to, we strongly recommend using an HTTP Proxy that has several benefits over using a mirror: - a lot of traffic will be saved with each update - clients will be able to take advantage of LiveGrid - clients will be able to download streamed updates for even quicker response to new threats If HTTP Proxy is not an option and you must use a mirror, you can create one: 1, Using the command-line Mirror tool 2, Using a v7 security product (Endpoint or mail/file server security product). You wrote " i even tried using the local file security software". What product and version did you mean?

Did you report the issue to ESET's customer care in Brazil? What's the ID of the ticket so that we can check its status with your local distributor?

You can create a new dynamic group as follows:

It appears that you have ESMC Server installed on Windows. Click continue to move on to Targets selection and select clients on which you want to upgrade the ESMC Agent. There you should be able to pick any clients from the list regardless of what OS they have installed.

For other issues than the one with opening gui reported in this topic, please raise a support ticket for your local customer care so that it's properly processed and tracked. This forum is not intended to be a substitute to customer care; it's rather a place when moderators and users can share their knowledge.

You can create a dynamic group for machines with active threats and assign it a policy that will apply blocking firewall rules. When using such policy, I'd be careful about not blocking communication with ESMC so that you can continue to manage ESET in case something goes wrong, e.g. if the active threats cannot be cleaned for whatever reason.

First of all please make sure that you are using a paid version (not a cracked one) and that your license is valid.

Please carry on as follows: - under Help and support -> Details for Customer care, enable advanced logging - reproduce the issue - disable logging - gather logs with ELC.

Does temporarily disabling protocol filtering in the advanced setup make a difference?

What bank's url did you try to open? I've opened https://www.anz.com.au/personal/ and it worked like a charm:

If you are able to reproduce the error easily, please carry on as follows: - under Help and support -> Details for customer care enable advanced logging - reproduce the error - disable logging - gather logs with ESET Log Collector and supply me with the generated archive for perusal.

Press F5 or click here to open advanced setup :

You can find the settings in the advanced setup -> User interface -> Alerts and notifications.

I think the problem here is with HTTP/2 that the bank site supports. BPP is going to have HTTP/2 support added within the following couple of weeks.

Also it could be that the issue started to occur after some changes in the system itself (e.g. Windows updates). Without troubleshooting the issue and narrowing it down, it's impossible to tell what the culprit is. It could be that installing V6 with default settings wouldn't make any difference either. In the mean time we've found out that ESMC may apply a weird configuration of the startup scan task run after user logon which causes a lot of more objects to be scanned than it's supposed. Unfortunately it is not clear yet how the particular user made such policy; by default correct flags and settings should be applied. That also means that installing Endpoint from scratch without applying a policy with Scheduler settings should prevent the issue from occurring.

You can set logging severity for each rule as shown below. Without doing this, information about application of the particular rule won't make it to the ESMC server.

Please elaborate more on what you mean by spoofing attack? You can provide a link to a description of the attack.

Since we are about to release a previously not planned service build of Endpoint (7.1) soon, the new email plug-in will be included in Endpoint v7.2 in H2/2019.

Basically yes, it'd be safe, however, you would not gain any benefit from it. You'd need to disable also the appropriate application statuses so that the protection status doesn't change. I'd say too much work for getting no benefit of it.

Maybe you don't have a default browser set. If you enter "start https://www.eset.com" in the command-line console, does it open ESET's website in the default browser? What version of ESET NOD32 Antivirus do you have installed?