Jump to content

Camilo Diaz

Members
 View Profile  See their activity

  • Posts

    42

  • Joined

  • Last visited

 Content Type 

Posts posted by Camilo Diaz

    Microsoft Office Zero-Day Follina

    in Malware Finding and Cleaning

    Posted

    9 hours ago, j-fly said:

    Hey ESET Admin,

     

    Thanks for all you do! Because the detection engine 25352 does address this vulnerability, do you still recommend MS registry change workaround? Just checking because we did receive the ESET engine update and we do have vulnerable products.

     

    Much obliged!

    You should definitely apply the work around...

    EEA Mac OS - showing up in dock, regardless policy

    in ESET Endpoint Products

    Posted

    It seems like the client is not pickup up the policy correctly and it keeps displaying the Eset icon in the Dock.

    I have confirmed the the policy is configured  correctly and applied to the device... See attached screenshots.

    I am also getting reports that the Client is displaying the OS updates notification, but we have it configured it to NOT display those... See screenshots..

     

    2056958156_ScreenShot2022-03-14at9_28_27AM.thumb.png.b80653dd0f7af14eb5ba7bb5eedaf5ef.png2056958156_ScreenShot2022-03-14at9_28_27AM.thumb.png.b80653dd0f7af14eb5ba7bb5eedaf5ef.png

     

    MacOS Monterey 12.3.1

    EEA 6.11.202.0

     

    1294010831_ScreenShot2022-03-14at9_00_01AM.thumb.png.24828ace6d11914bb3cf466718892c71.png

     

    Screen Shot 2022-03-14 at 9.42.34 AM.png

    Screen Shot 2022-03-14 at 9.39.57 AM.png

    Detection management for Web Protection module

    in ESET PROTECT On-prem (Remote Management)

    Posted

    ESET Security Management Center (Server), Version 7.2 (7.2.1278.0)
    ESET Security Management Center (Web Console), Version 7.2 (7.2.230.0)

    We are currently managing the Antivirus detection by adding the endpoints to a Dynamic Group and running a Scan Task which if successful it resolves the detection.

    My understating is that for the 'Firewall' Module detection, this has to be manually resolved. (Is there any insight of improvements on this?)

    For the 'Web protection Module' we have a fair amount of blocked detection 'attempt to connect to URL - Blocked by PUA blacklist/Blocked by Internal blacklist'.  We'd like to auto-resolve/close this if the status is 'blocked'. Is this possible?


    Thanks,

    Camilo.

     

    Latest update causes eset_proxy to flip out

    in ESET Cyber Security (for Mac)

    Posted

    We have experienced the same issue again, eset_proxy process consuming 100% CPU and blocking somehow the network on the affected devices. Running Eset Endpoint Security 6.90.0. All affected devices are running macOS 10.14 (Mojave). Have reported it to ESET so hopefully we'll get an answer soon. Thinking to upgrade to 6.90.3 but not sure if it will make any difference at this stage.

    Agent Upgrade to Dynamic groups

    in ESET PROTECT On-prem (Remote Management)

    Posted · Edited by Camilo Diaz
    adding KB

    Is there a way to select a Dynamic group as the 'Target' group for an Agent Deployment Task?

    As you can see in the screenshot, Dynamic groups are greyed out. I have +8000 devices so ideally I want target the task only to those that are not in the latest version.ESET.thumb.png.9cf8a34aa0ed87b0e0376801ea927ee1.png

    ESET Security Management Center (Server), Version 7.1 (7.1.717.0)
    ESET Security Management Center (Web Console), Version 7.1 (7.1.393.0)

    edit:

    This is the official KB from Eset which is not clear on my particular questions.

    https://support.eset.com/en/kb6741-remotely-install-or-reinstall-the-eset-management-agent-using-eset-security-management-center-7x

    Thanks,

    Camilo

     

    ESCM - Server module update is failing.

    in ESET PROTECT On-prem (Remote Management)

    Posted

    ESET Security Management Center (Server), Version 7.0 (7.0.577.0)
    ESET Security Management Center (Web Console), Version 7.0 (7.0.429.0)

    ESCM is complaining under Status Overview, that cannot reach 'Server module updates'. "Server module update is failing. See audit log for more details." 

    Outbound traffic for the ESCM server is allowed on ports 80/443.

    Current config is to check every few hours. SERVER: AUTOSELECT (Regular Update)

    I've had a look at the logs on the servers but can't find any trace of what's wrong.

    Connection to the repositories is working fine.

    Any ideas?

    Cheers

    ,Camilo.

     

×
×
  • Create New...