mrac

Hi. We want to participate in test too. Currently we have some users who complains on version 6.x about random big CPU consuming. Want to test new version on them.

Fixed by restoring database from backup. Not sure what happened, but fixed...

Too soon wrote, that all working. After repair server started, but all agents cannot connect to it. All has last connection time when server failed. In logs: 2021-12-13 15:54:17 Information: CDatabaseModule [Thread 1f7c]: ReplicationStaticObjectsMapper: Finnished batch loading of COMPUTER objects 2021-12-13 15:54:17 Information: CDatabaseModule [Thread 1f7c]: ReplicationStaticObjectsMapper: Fetching all CLIENT_TASK_TO_COMPUTER_RELATION, CLIENT_TASK_TO_DYNAMIC_GROUP_RELATION and CLIENT_TASK_TO_STATIC_GROUP_RELATION objects 2021-12-13 15:54:17 Error: NetworkModule [Thread 20bc]: Receive: NodSslWriteEncryptedData: Internal error in the underlying implementations., ResolvedIpAddress:128.74.107.155, ResolvedHostname:128-74-107-155.broadband.corbina.ru, ResolvedPort:63541 2021-12-13 15:54:17 Error: NetworkModule [Thread 20bc]: Protocol failure for session id 3383, error:Receive: NodSslWriteEncryptedData: Internal error in the underlying implementations. 2021-12-13 15:54:17 Information: NetworkModule [Thread ac4]: Sending message: ConnectionFailure 2021-12-13 15:54:17 Information: NetworkModule [Thread 20bc]: Forcibly closing sessionId:3383, isClosing:0 2021-12-13 15:54:17 Information: NetworkModule [Thread 20bc]: Removing session 3383 2021-12-13 15:54:17 Information: NetworkModule [Thread 20bc]: Closing connection , session id:3383

Thank you for fast answer and solution. Very appreciated. This helped to fix issue.

Hello. Latest version of ESET Protect 9 was installed, worked without issues until today. Server was upgraded ERA6 -> ESMC7 -> ERA Protect 8 -> ERA Protect 9 (when they were released, not at once). Working on Windows 2012R2 + MSSQL2019 (another server). Yesterday I made changes: 1. Enabled advanced security, regenerated CA, server, agent, proxy certificates. 2. Changed Sever certificate. Agent certificates in agent policy. 3. Enabled 2FA for all admins. It worked without issues about 24 hours. And crashed today. Restarting of service/complete server not helping, crashing again: The ESET PROTECT Server service terminated unexpectedly. It has done this 10 time(s). Not found something in logs (but attaching them + dumps). I'm out of ideas... Eset.zip

Yes, patch helped me too with clients disconnects. But issue with non-working scheduled tasks still present.

As I see, ESET published test patch for ESMC7, fixing clients disconnects (Windows-only) here: https://support.eset.com/ca7050/?locale=en_EN&viewlocale=en_US

I need this server on Windows (it is VM with other services on it, like WSUS and selfservice portal, I cannot move them to Linux) and have no free resources for additional VM.

Ok, I read and see, that in your case the problem was with firewall settings, right? I already wrote, that have same issue in same subnet, there is no firewall or router between ESMC and clients, it is L2-level. I sent logs and Wireshark dumps to support, but answers were: 1. Try to change clients connections from every 1 minute to every 20 minutes (didn't help) 2. Change data limit from client from 100MB to 300MB (testing now, but I think i wouldn't help too). For me it looks like all issues with ESMC appearing in same time (clients stop connecting, client tasks stop working, scheduled tasks stop working too), after 2-3 days of work and it looks like some internal ESMC component crashing...

Yeah, all worked fine with ERA6, now not working with with ESMC7 (with same issues by many clients in many countries) and the problem is in our environment. L - Logic...

Disabling firewall only doing issues if you disabling service. If it disabled correctly by GPO or by network profiles - nothing wrong with it, ICMP will work, no any issues. I already sent logs and Wireshark dumps to ESET support.

In my case: Firewall disabled on server and clients (only perimeter firewalls enabled). Some clients in same subnet, some in others - doesn't matter. My network ~400 agents VM with 4 vCPU, 10GB RAM (when it was ERA6 it had 6GB RAM and no issues) MSSQL 2014 Standard on separate server with 2CPU and 64GB RAM Looks like issue only with v7 agents. It was situation, when I enabled 2 old VMs with v6 installed on it - they appeared in ESMC instantly in "Lost & Found" with all info. I removed agent v.6 and installed agent v.7 on VMs. After that 2 new instances with same name appeared in "Lost & found", but without any info. I waited for 1 hour, restarted both VMs - nothing. After restarting of ESMC service they are instantly become as computers with agent v7 installed. Now I migrated ~99% of computers to v7 agent, so problem with ESMC appearing every 2-3 days

In my environment - yes, ESMC on Win Server 2012R2

Have all the same issues after upgrade from ERA6 to ESMC7. I restarting server every 2-3 days, otherwise new clients not appearing, client tasks not working, scheduled tasks not starting. Opened case with Russian ESET support, sent dumps to them today. Any ETA with fixes? ERA6 worked very well, never had problems...

On all machines was ESET Antivirus 6.6.2078.5 x64. Most computers were successfully upgraded to ESET AV 7.0.2073.1. On problematic computers I uninstall antivirus first before removing agent (software uninstall task). Now these computers have no agent, no antivirus and I can't reinstall agent because of error 1603. OS: Win 7 x64 and Win 10 x64 1803, US English and Russian versions. ESET products - English version only.

Hi. I upgraded to ESMC7, then updated agents and antivirus. Most of them upgraded fine (~250 computers) but some of them had issues with agent upgrade. 1. When they had 6.5 agent, all were fine. 2. I tried to upgrade agent via task "Security management center component upgrade" and got error 1603. 3. I removed old agent by task "Stop managing" - old agent removed, folders ESET in Program Files and ProgramData disappeared, services removed too. 4. I tried to install new agent by: a. Push task via ESMC b. GPO-task (msi+ini) c. bat-file (agent live installer) using psexec In all cases installation of agent finished with error 1603. I tried to re-install agent 6.5 and received error 1603 with it too. Looks like issue appearing at the very beginning of installation, because it is not even creating folder ESET in Program Files, stopping earlier. Reboot not helping. About 30-40 computers has this issue, in different offices in different countries, so I cannot use "ESET Uninstaller" tool in safe mode on them. Any suggestions? Also, agent v7 has some strange connectivity issues: sometimes computers and servers, which are currently available and has agent running, displaying in ESMC as last time available 20-30 minutes ago (sometimes 2-3 hours ago), so tasks on them starting with delay in several hours. After some time they appearing again as online. Never had such behavior with v6 agents...

Only full reinstall helped to me. My computer not got updates at all, reboot\removing and reinstalling licenses not helped. After full reinstall started working correctly. Now I need to reinstall about 190 affected computers from ~400.

Any news? I'm checking updated to this build computers, most of them reporting to ERA that all fine, but have last databases update - 21.12.17. All of them has issue like on my last screenshot: Product not activated on "Update" tab and "License is valid" on "Protection status" tab. Removing license from ELA and reinstalling it in ERA task not helped. Some computers has latest databases. Full reinstall on hundreds of computers - is not a solution.

I re-activated as wrote Marcos, but hour later new issue: license installed, but updates not working

Yes, this fixed issue on my computer. Will do the same with 400 another Also we have issue with hanging client on update: when status is "Your license file does not contain a Username or Password" click on button "Check for updates" hanging client on infinite check. Confirmed by several users (also 3 times on my computer).

I checked several computers, upgraded to 6068 - all have this issue. The worst part of issue is that they aren't updating virus bases and reporting to ERA that all is fine. I tried on mine computer - deactivated via ERA, started activation task (without reboot) and it hangs in "Running" state forever.

Hmm... I tried several times "Check for updates", always was Failed to rename file. I enabled "Advanced update engine logging" and error disappeared itself...

Have today this issue on my own computer. Version 6.6.2052, on ERA enabled pre-release updates. Seen this on many computers...

Hi, we have several questions\issues with new version: 1. On ERA I set policy (User interface\Alerts and notifications\Minimal verbosity of events to display) = Warnings. I see that policy applied, but users getting all notifications even with Information severity, like "Removable disk scan completed", or "Initial scan completed" etc. Bug? 2. If I enabling Policy override, after ending of overriding, looks like computer scan ignoring Excluded folders. When I tested and finished override, antivirus found and tried to clean files from excluded folder. 3. If I protecting setup settings by password, it's not very comfortable for users, they cannot pause antivirus for some time, for example when compiling locally big projects. Also user cannot exclude folders with source code, because settings locked. If I will enable policy override and disable password protection, user can change settings for restricted time, but he also can pause antivirus with option "Untill reboot". So user will just disable antivirus. Am I correctly understand, that: a. I cannot do policy, when user can change options of antivirus, can pause it for 10-30 minutes, but cannot pause "Until reboot" b. I still cannot force start antivirus on users computer from ERA, like it was in older ERA versions?

We have only license on Workstation+FileServer, but not for Exchange. I disabled Outlook plugin on home computer, look like it helped. Thanks