[ESET ERA 6 - SSL problem]

Hi Marcos,

thank you. Yes, in FF I cat this messeage disabled.

If I uset curl, I got this error:

* Peer certificate cannot be authenticated with known CA certificates
curl: (60) Peer certificate cannot be authenticated with known CA certificates

 

I must add CA to server?

Thank you.

 

[ESET ERA 6 - SSL problem]

Hi guys,

I have ESET ERA 6.5 and was set up SSL:

<Connector port="8443"
               protocol="HTTP/1.1"
               SSLEnabled="true"
               maxThreads="150"
               scheme="https"
               secure="true"
               clientAuth="false"
               sslProtocols="TLSv1,TLSv1.1,TLSv1.2"
               ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
                        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
                        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
                        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
                        TLS_RSA_WITH_AES_128_CBC_SHA256,
                        TLS_RSA_WITH_AES_128_GCM_SHA256,
                        TLS_RSA_WITH_AES_128_CBC_SHA,
                        TLS_RSA_WITH_AES_256_CBC_SHA256,
                        TLS_RSA_WITH_AES_256_GCM_SHA384,
                        TLS_RSA_WITH_AES_256_CBC_SHA"
               keystoreFile="/opt/eset/RemoteAdministrator/Server/myesetera01.pfx"
               keystorePass="topsecret" keystoreType="PKCS12"
               />

 

After restart service I got this error in browser:

SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED

Certificate was build in internal CA (Windows). Can you help me with this issue?

Thank you.

[Host Intrusion Prevention System (HIPS) is disabled]

yes, after upgrade to 6.5 is HIPS disabled - this is problem.

Policy rule is set to enable and is applicated.

[Host Intrusion Prevention System (HIPS) is disabled]

Problem is after upgrade to new ESET Endpoint 6.5 After this update HIPS is disabled and I dont know why.

[Host Intrusion Prevention System (HIPS) is disabled]

yes, I know - I have HIPS disabled. But if I have ESET Endpoint Antivirus, or Endpoint Security 6.3/6.4 and upgrade to ESET Endpoint Security 6.5 after upgrade will by this options HIPS disabled.

Firewall rule is set to enable and is applicated.

This is happend only if I do upgrade to Enpoint Security 6.5.

Actually I have 4689 pc's where is HIPS disabled.

[Host Intrusion Prevention System (HIPS) is disabled]

Hi Marcos,

here is collected logs.

 

[Host Intrusion Prevention System (HIPS) is disabled]

Hi guys,

I have ESET ERA 6.5. I was reinstall ESET Endpoint Antivirus 5 to Endpoint Security 6.5. Process reinstall was ok, but in status on host I have this error:

Host Intrusion Prevention System (HIPS) is disabled

Firewall rule is set to enable and is applicated.

How I can resolve this issue?

Thank you 

[Issue ID: SOLN406]

Hi Martin,

It crossed my mind, but in this directory is not dir "RemoteAdministrator" ( C:\ProgramData\ESET\RemoteAdministrator\..); only directory "ESET Endpoint Security".

BUT, this pc had installed ESET ERA Agent, but for some unknown reason has been uninstalled.

[Issue ID: SOLN406]

and I have log from failed installation

install.log

[Issue ID: SOLN406]

Ok, I resolve problem with downloading Live installer. I use IE (not FF).

Instalation with Live installer fails with same error, BUT can see:

Status: Inserting certificate authority content into database

[Issue ID: SOLN406]

Hi,

I can not finish this live installer - see in attachment

[Issue ID: SOLN406]

Hi Katarina,

I have 6.4. ESET ERA version.

Actualy I tried install Agent from ESET web site (hxxp://repository.eset.com/v1/com/eset/apps/business/era/agent/v6/6.4.283.0/Agent_x64.msi)

[Issue ID: SOLN406]

Hi Guys,

I need install ESET ERA Agent on client (win10) but I allways got this error:

Issue ID: SOLN406

On client I have no FW, no proxy. I run this installation with admin rights.

Can you help me?

[Network Peer Overloaded Alert!]

Hi Michal,

thanks for th explanation.

Problem solved.

[Network Peer Overloaded Alert!]

Hi guys,

Today I got this email from ESET ERA:

"At least one of the network peers is in state Limited or Overloaded. Please log-in to your ESET Remote Administrator for more details."

What this mean? I was search on ERA, but nothing found.

Thank you.

 

[ERA - upgrade Endpoint Antivirus to Endpoint Security]

please close this topic. Problem is solved.

Thank you!

[ERA - upgrade Endpoint Antivirus to Endpoint Security]

ok, I solve problem - client had not internet connection.

Now is client activated.

[ERA - upgrade Endpoint Antivirus to Endpoint Security]

Hi Marcos,

sure, I used licence for Endponit Security.

[ERA - upgrade Endpoint Antivirus to Endpoint Security]

Hi guys,

finally I used client task "Install Security Product (Endpoint Security)" and run this task on clients with Endpoint Antirus.

On client pc was installed Endpoint Security 6.4, but it is not possible Activation this product. This task allways failed with error:

"Task failed in the security product"

If I use this task activation on another pc, where is fresh installed Endpoint Security - task will finished sucessfully.

[ERA - upgrade Endpoint Antivirus to Endpoint Security]

Or - is this best way to upgrade from Endpoint Antivirus 5.0 to Endpoint Security 6.4 use client task with Install Security Product (Endpoint Security) and run this task on clients with Endpoint Antirus?

Thank you. 

[ERA - upgrade Endpoint Antivirus to Endpoint Security]

Hi Marcos,

I dont know, because it is not possible do this manually - notebook is in another city. I can do it only with ERA.

[ERA - upgrade Endpoint Antivirus to Endpoint Security]

Hi guys,

I have ESET ERA 6.4 and I have question about how to upgrage on pc from Enpoint Antivirus 5.0 to new Endpoint Security 6.4?

I was create clent task with Install security product (Endpoint security), but task was failed.

Thank you.

[ESET ERA:Failed to get installers: Failed to synchronize package repository]

Hi,

My ESET ERA appliance have static IP. In policy I have hostname (in our DNS has hostname static IP)

Use direct connecton if HTTP proxy in not avaiable is Enabled

I use Version 6.4.304.0 of ESET ERA virtuall appliance (Centos 6)

 

I dont set any username and password - it is ok?

[ESET ERA:Failed to get installers: Failed to synchronize package repository]

Hi,

hm.. but when I disable this:

2.) configure: ADMIN / SERVER SETTINGS / ADVANCED SETTINGS / HTTP PROXY:

Use proxy server OFF

 

I can download ERA Agent and I can "download from Local Deployment"

I think if I enable HTTP Proxy, communication to ESET servers will be lost. My ERA server can not comunicate with ESET Servers.

 

[ESET ERA:Failed to get installers: Failed to synchronize package repository]

Hi guys,

I have ESET ERA 6.4 (Virtual Appliance) installed (Centos 6) and I was configure Apache HTTP Proxy. I made:

1.) /opt/httpd-2.4.18/bin/apachectl -k start

2.) configure: ADMIN / SERVER SETTINGS / ADVANCED SETTINGS / HTTP PROXY:

Use proxy server ON

Host <my_eseterea_server>

Port 3128

Username and password is blank (no entry)

Use direct connecton if HTTP proxy in not avaiable ON

 

3.) TEST <my_eseterea_server>:3128 was sucessufully (It works!)

 

Actualy if I want download new ERA Agent i got this error: Failed to get installers: Failed to synchronize package repository

Same problem if I want download from "Local Deployment" - I had no packages to download.

 

What am i doing wrong?

Thank you!