Megachip

How did ESET secure against it? How they prevent someone using "ESET SSL Filter CA" for illegitimate signing?

Is there any guide how to upgrade ESET Rogue Detection Sensor via ESET Remote Administrator Web Console? THX a lot, meg

Thx. But which process monitor did you mean? Sysinternals?

Hi there, is there any way to log all files which are scanned by the real-time file system protection? THX a lot, best, meg

So, since 2008 it is mostly impossible to do minor upgrades of ERA/ESS without loosing the configuration (remove ESET (or the registry key) and reinstall). Any official solution for that? Trying to upgrade 2242 to 2254 and running into the same issue. Why minor upgrades (of the same language, upgrading from german to english works fine) are blocked? Or is 2242 fine on Windows 10? THX a lot, Best, Meg

The first 5.X version, which supports Win 10 (final) official is 5.0.2254. The windows Build number is 10.0.10240. Regarding to this doc, your version should be fine. The Build number on your screenshot is from Windows8/Windows Server 2012 BTW, some of our customers reported, that hips even not work on a clean 10240 installation. (No Upgrade etc)

This is a known, but seems still not fixed, bug with the mdm daemon. See here and here.

Topic said it all

Seems to be fixed now. THX a lot.

Your right. The bug is, that clients with older virus definitions than 3-5 days can't update anymore. The update process crashed after getting the protoscan2 file. I've had a open ticked which was closed with the remark, that ESET had fixed the bug. It seems fixed on new created mirrors on client side. But seems not fixed on ERAS side. Which one of the clients?

A newer Afaik the bug is already known and fixed? The problem was, that protoscan2 version 1173.7 does not allow any updates for clients which updates older than some days. Clients which updates every day aren't effected. Creating new update mirror or clearing the update cache did not solve the problem. (even that the official eset update mirrors didn't provide the modul, eras and clients with mirror even "create" and provide it). 3 Days after discovering the problem, we see that ESET updated the modul on the pre-release mirror to 1173.9, which fixes the problem. So we switched faulty clients to a pre-release mirror for updating this module and than back to normal. since some days, it seems that ESET also removes the module from mirrors created by clients (like on official mirrors), but i'm unable to remove it from ERAS Is there a way to manually remove it (or upgrade it to 1173.9 except switching the whole mirror to pre-release)? THX a lot

Nothing new... Impossible to run Agent AND MDMcore. Either the one ore the other crashes.

Looks like I've the same problem with agent/mdmcore (on the eset own appliance): 2015-06-30 12:49:01 Error: CMDMCoreConnectorModule [Thread 7f0d9ebfd700]: Cannot connect to MDMCore using IPv6: Net Exception, Address family not supported 2015-06-30 12:49:09 Warning: [Thread 7f0d9ebfd700]: run: Exception while receiving data: Net Exception, Socket is not connected.

Looks wie still have the protoscan2 bug on our primary mirror (ERAS 5). Clear update cache seems not working. If I create a new update mirror on some of our clients, the bug is fixed there. How can I fix it in eras? THX a lot,

Tried several hours from several machines, same error. Was running I think it was listing and reachable, but didn't checkt it on Friday. No unsuccessful logins in tracelog. Which seems logic for me, cause Web-Console reported communication error. ... ... Came back from weekend, login works

What about a device which have no MDN, IMEI, IMEI SV, no SN and noch MAC Adress?

Got this error on Web-Console after upgrading from 6.1.28 to 6.1.33. Can't login anymore. All services running. Using Appliance and upgrade routine as described here. Suggestions? THX a lot

generates me 0 records

ATM it seems that the agent crashes immediately after trying to connect the MDMCore on IPv6. eraagent deamon still running but isn't reachable anymore. Also it is not possible to end it via init.d. It does not matter eramdmcore is running or not. MDM runs fine there wile, but system is out of control without an working agent. Will try manually upgrade of the agent. Support is informed.

ATM, ERA6 is a nice looking product, but for me unusable in (our) business environments. To unstable, to much missing needed features. No useful upgrade path from V5. Lets see what the future brings. AFAIK V5 is still in maintenance for the next 3 years.

Do you have running 2 commands? If the Agent is dead/not running, how it could restart himself? @Marcos: There should be a watchdog or something, which restarts agent. Seen that the agent on Server crashed (or shut down) on 5.05... no connection since this time 2015-05-05 11:02:49 Information: Kernel [Thread 7f1029511700]: Used memory after modules start-up is 49712 KB 2015-05-05 11:02:49 Error: CMDMCoreConnectorModule [Thread 7f0fc97fb700]: Cannot connect to MDMCore using IPv6: Net Exception, Address family not supported 2015-05-05 11:02:49 Error: CMDMCoreConnectorModule [Thread 7f0fc97fb700]: Net Exception 2015-05-05 11:09:15 Information: Kernel [Thread 7f1029511700]: Used memory before modules shutdown is 64728 KB EDIT: Looks like this interferences with the following bug. The bad thing: eraagent can't be stopped via init/systemctl and can't be run if mdm is running :/

Thats the problem. Agent log told me 10:57 but ERAS say 12:57 ... Afaik ERAS logs did not contain agent problems (e.g. no connection). Nothing. The deamon simply not running and not connecting to server. No crash or something loggt. It logged a shutdown. Why daemon shuts down? 2015-05-27 13:13:52 Information: Kernel [Thread 0xa06b61d4]: Started module CRDSensorConnectorModule (used 0 KB) 2015-05-27 13:13:52 Information: SchedulerModule [Thread 0xb0525000]: Received message: GetRemainingTimeByUserDataRequest 2015-05-27 13:13:52 Information: SchedulerModule [Thread 0xb0525000]: Received message: GetRemainingTimeByUserDataRequest 2015-05-27 13:13:52 Information: Kernel [Thread 0xa06b61d4]: Used memory after modules start-up is 40148 KB 2015-05-27 15:14:46 Information: Kernel [Thread 0xa06b61d4]: Used memory before modules shutdown is 41420 KB 2015-05-27 15:14:46 Information: Kernel [Thread 0xa06b61d4]: Preparing to stop Interesting... exact the same thing happens 5 min before on another OS X maschine. but without the message Not possible in our infrastructure. Hope it will implemented soon as self protection. Rebooting system helps How to restart Agent on OS X? Tried to starting the app but did not solve the problem.

have several failed tasks (softwareuninstall, remote PCU etc). How can I see a detailed error message/log?

Aprox 1/2 of my test clients have no recent connection to the server Looks like there agents died. Second problem, agents seems to log in UTC (the clientime is not utc) while server is local time. In 6.1.33 is there finally a protection for disabling or uninstalling the agent by the user? Thx for the infomations, meg

Would be nice to have an global timeline where all (or filtered) events (warnings, errors, finished tasks, failed tasks ...) listened. So the user have a 1 page overview what happened in last time and do not need to click through all clients.