karlisi

Seems normal. We have about 60% average utilization on production server with about 1400 clients and RAM 6GB. On another small one with only 25 clients and 4GB RAM we have 73% average.

Here is the recommended migration path https://support.eset.com/en/kb7710-migrate-managed-computers-from-an-existing-eset-protect-server-to-a-new-eset-protect-server

Tested upgrade from 10.1.2050 to 10.1.2058 on 2 clients, was OK. Windows 10 Pro 22H2.

Most of our network is based on Mikrotik products. No worse or better than other systems. As of this vulnerability, it's exploitable only if malicious person has administrative access to device, so, this is the main problem. Here is what Mikrotik says about it https://blog.mikrotik.com/security/cve-2023-30799.html

You have 2 spaces between symbols, that's not allowed in CRON expressions

OK, I see. This is paid product, not free.

Also, where you get the file cispro_installer.exe? Free Comodo installer is called cav_installer_blahsomething.exe. Out of curiosity I uploaded it to virustotal and there are no detections on it.

In case You still want to uninstall 7-zip using ESET, you can use Run Command task (uppercase /S) C:\Program Files\7-Zip\Uninstall.exe /S https://sourceforge.net/p/sevenzip/discussion/45798/thread/8bb0402876/

Perhaps ESET agent not supporting 7-zip uninstall. Check in client computer's info -> Installed applications, column "Agent supports uninstall".

Do you have attached "Application reporting - Report all installed applications" policy to this computer?

Yes, I expect to disable fast boot by ESET for one off/on cycle or one restart. Why not? Are there any legal or technical problems? In fact, I am already doing this, I have dynamic group, where goes all endpoints with alerts Restart required, and task which disables fast startup. Then I have another dynamic group where goes all endpoints without that alert, for this group task enables fast startup. Not ideal solution, but it works. And I believe, ESET can make this more elegantly.

Turn off fast startup in Windows settings. You can do this from ESET Protect with task, running command powercfg -h off. Shame on ESET they can't solve this more correctly for years.

Yes, ESET Protect server should be exposed to internet in your case. Be sure to open only ports needed, for clients to communicate with server this is TCP port 2222 in default configuration. We have filtered the ports on our perimeter router, this hides the ESET Protect server from potential attackers. No problems with that for many years.

I doubt there are security issues with that sites, we also had the same problem connecting https://www.pakalpojumucentri.lv/ which is used widely in all Latvia, and only 2 customers had problems, and both are using ESET products.

"What have the citizens of russia done to eset or anyone?" As for me, I believe, the government is there to do things on behalf of me, and if so, every citizen of every country is responsible, not only their presidents. I suggest to not continue this thread, it could lead to political debates, and ESET security forum is not the right place for that.

Yes, use built in report "Computer hardware overview"

Your solution won't work if hostname is changed after reinstallation. The goal is, how to find duplicate entries for the same hardware:

Can you explain, what exactly have you done.

AFAIK no, every time you create new All-In-One installer, specify port in 'Advanced' step.

https://help.eset.com/protect_deploy_va/80/en-US/?va_upgrade_migrate.html

I think, the main question should be, what is in your root partition. I have about 900 endpoints and only 9GB used in root.

Most apps from Microsoft Store also are not reported by ESET, perhaps because they are not installed in Program Files or Program Files (x86) folder.

For not activated products I am using dynamic group, I think it's built in, 'Not activated security product'. Or at least such template by default is provided by ESET.

Till now I must create new upgrade task for every new version manually. Or edit existing task, changing package to latest available.

Wow, this perhaps is the most wanted feature of ESET remote administration tools ever.