Shafiq

Thanks for the help. I was able to install ESETAgent and it is communicating with ERA server and I was able to install Linux file security using “software installer” from ERA (Admin->Software install->new task) Task completed successfully but I’m not able to start the eset service. administrator@test-pc-test ~]$ systemctl status esets.service ● esets.service - ESET Scanner Daemon Loaded: loaded (/usr/lib/systemd/system/esets.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Tue 2018-10-09 12:06:09 +03; 7min ago Process: 1151 ExecStart=/opt/eset/esets/sbin/esets_daemon (code=exited, status=203/EXEC) Oct 09 12:06:09 test-pc-test systemd[1]: Starting ESET Scanner Daemon... Oct 09 12:06:09 test-pc-test systemd[1]: esets.service: control process exit...3 Oct 09 12:06:09 test-pc-test systemd[1]: Failed to start ESET Scanner Daemon. Oct 09 12:06:09 test-pc-test systemd[1]: Unit esets.service entered failed s.... Oct 09 12:06:09 test-pc-test systemd[1]: esets.service failed. Hint: Some lines were ellipsized, use -l to show in full.

Hi, I want to install file security on Linux server (Oracle), and manage the servers on ERA 6.5. There is no all in one installer support for linux as it is for windows. Can you please provide steps for the installation of file security on oracle Linux and how to manage in ERA. OS: Oracle Linux 7.5 ERA: 6.5 (installed on windows) Thanks

Hi Eset, One of the client computer installed with ESET endpoint security 7 got infected with malware (PC was communicating with the public IP, which should not have happened). This PC was communicating only for few seconds once in an hour and connection was getting closed. We couldn't able to find process id (we used process explorer to find out, but not able to as connection was getting close very fast) but we could see the traffic generating from computer using wireshark. Computer has been formatted, but we would like to know from ESET, what steps should we take, if we face similar issue, and how I can report about suspicious activity on computer in case there is no file for submission. HIPS, firewall was active with automatic mode and Network protection (IDS) also ESET Endpoint Security 7 OS: Windows 8.1 ESET Remote Administrator (Server), Version 6.5 (6.5.522.0) Thank you.

@Rami File is not in quarantine folder. This is the issue, since the file is not in quarantine. I don’t know how to recover the deleted file.

ESET, any update, how to recover the file deleted by ESET endpoint security. @Daedalus .. thank you

Hi Marcos, The file has been deleted by ESET (Action taken: Clean by deleting) and the file is not in quarantine. How can we retrieve the file? Thanks

Hi, ESET detecting in house developed application as suspicious file and deleting it. I tried to restore the application from quarantine manager but ESET keep deleting the file. This file is not in one particular folder, different users store file in different location. How can I exclude this particular file? All the client having strict cleaning policy. Product: Endpoint security 6.6.2052.0 Client OS: Windows 8.1 ESET Remote Administrator (Server), Version 6.5 (6.5.522.0) ESET Remote Administrator (Web Console), Version 6.5 (6.5.388.0) Engine version: 18020 (20180908) Threat name: Suspicious Thanks

Hi, Is there a way in ERA to find ESET outlook plugin is enable or disable on client computers. Another question is if a user on client machine disable ESET outlook plugin, can ERA policy able to re enable the plugin. Current policy on Email client protection is enable “integrate into Microsoft outlook”. Product: Endpoint security 6.6.2052.0 Client OS: Windows 8.1 ESET Remote Administrator (Server), Version 6.5 (6.5.522.0) ESET Remote Administrator (Web Console), Version 6.5 (6.5.388.0) Thanks

Hi Marcos, This issue is resolved by setting force policy for Web Access protection and force setting on Enable HTTP protocol Checking and Force setting on Enable Firewall, Enable Network Attack protection. Thank you for the help.

@Marcos SSL/TLS protocol filtering is disable. I have attached screenshots of setting @Noorigin and itman Thank you.

I followed above step and tested on 1 computer but result is same.

Hi There, We have computers running endpoint security 6.6.2052.0, the issue is 50 computers firewall is disable and I have to enable firewall, manually enabling firewall is not possible since it will require user permission and it is time consuming. Is there any way to enable firewall using policy? Or can you suggest me best way to resolve this issue. ESET Remote Administrator (Server), Version 6.5 (6.5.522.0) ESET Remote Administrator (Web Console), Version 6.5 (6.5.388.0) Client computer OS: windows 8.1 Product: Endpoint security 6.6.2052.0 Thanks.

Hi There, I have windows 2012 server with ESET Endpoint Security 5.0.2214.4 installed, I want install ESET file security on the server. Owner of the server do not want to restart the server. Is there a way to uninstall the ESET Endpoint Security and install ESET file security without restarting the server. Local ESET server ESET Remote Administrator (Server), Version 6.5 (6.5.522.0) ESET Remote Administrator (Web Console), Version 6.5 (6.5.388.0) Server: Windows 2012 ESET to be installed Server: Windows server 2012 Installed Product: ESET Endpoint Security 5.0.2214.4 To be install: ESET file Security

Block was from Local firewall. Issue resolved ... Thank you for the help

I will check firewall to see if there is any blocking for Local ERA server. HTTP proxy configured for agent communication to local ERA server. Thanks.

I cannot open https://edf.eset.com/edf from server. ERA server is installed is virtual and Windows 2012 R2 is OS. From my personal laptop i opened https://edf.eset.com/edf and i got this message ''20101003Unsupported Content-type: unknown'' Thanks.

Please help to resolve license issue.

When I try to remove the license from ERA I get error " Removing License Failed" Note: I can open https://ela.eset.com/ Thanks.

Hello We have extended our ESET license and got email from ESET, that license is extended. We have received .lic file also but when I try to add the file from ERA I get this message “Failed to add License by License Key” and Failed to add license by license file: Invalid License file provided I have performed below steps Admin->License Management->ADD Licenses->License Key->Offline License File->upload->Add License Note: our existing license expire in 2019 we have extended the license to protect more devices I did not remove existing license from ERA Thanks!

Hi Janoo, I have moved the server to other host server and size is not increasing the way it was increasing before. I'm monitoring and will update here. Thank you Thanks

Hi, sorry for late reply C:\ProgramData\ESET\RemoteAdministrator : 1.42 GB C:\Program Files\ESET\RemoteAdministrator : 400 MB C:\Program Files\Microsoft SQL Server : 4 GB I' not sure which folder getting data on the server. only All in one ERA is install on the server

Hi, Thanks for the reply I’m trying to find out which file/folder consuming more space, till now I’m not able to find out which folder/file consuming more space. I have used WinDirstat software also to find folder size but I’m not able to find exact folder which is consuming more size. Any help will be appreciated.

what is filling is the database or, the disk on the computer where ERA Server is running : Disk is filling up Do you use any functionalities like device control, or web-control in your environment? (you have features active, and report templates configured to collect the data): Yes we have Device and web control enable, and for web wontrol we use default web control feature.

Hi There, Local ESET antivirus server filling approximately 3 GB data every day. We are having 950 devices connected to the ERA. In Server setting, logging is set for Warning (Trace Log Verbosity) and Database Clean is for 5 Months. Agents communicate to the Local ERA server using HTTP proxy. Please Help Product: ESET ERA (Server), version 5.5 (6.5.5220) ESET ERA (Web Console), Version 6.5 (6.5.388.0) Windows Server 2012 R2 64 Bit Installed Components: Update Module: 1069 (20161122) Translation Support Module: 1672 (20180309) Configuration module: 1526.10 (20180117) Sysinspector Module: 1269 (20170321)

Hi Marcos, Application protocol filtering is enable