mstroud_pfi

Hello, I received a few alerts for Winzip on a particular computer. It's been recently removed and I started a new In-Depth Scan with cleaning from ERA. The scan finished and nothing was detected. Am I doing something wrong? The active threats are still showing. Thanks, Matt

Yes, I tried filtering by OS and it still showed 6.1. However, I was able to get 6.2 to show up ONCE out of ten tries throughout the day. I'm finding a lot of these issues in 6.2.

Yes, that's what I'm doing but Endpoint 6.2 is not showing up.

I'm trying to upgrade some clients with the latest version of Eset AV 6. However, it's showing 6.1.2227.3 as the most recent. I should see "6.2.2021.0" in the list.

I'm having issues with Agent Task successfully completing but never actually installing the agent. I didn't have these issues in 6.1

Marcos, I tried upgrading using the ERA Component task but it failed so I did a uninstall and reinstall. I had to re-run the tasks multiple times before all of the agents were installed. I'll check for the ra-agent-install log next time. Thx

I'm having issues with clients showing up as targets that were not selected in the Task (And it's not a DNS issue). It happens when there are multiple tasks running. If you click on the details of one task, it will show you targets from the other task. Very strange. Anyone else having these issues?

My tasks are completing successfully but the agent is not being installed. The deployment type is "Windows Network" and shows "Task Finished Successfully".

So I'm assuming the ERA server would be best to upgrade first?

Thanks for the explanation Marcos. When doing an upgrade, would it download all of the upgrade components to the HTTP Proxy server?

I decided to upgrade my ERA server from 6.1.444.0 to 6.2. The majority of my clients failed to upgrade including the ERA Server itself. I contacted support and they said the upgrade task was "Hit or Miss" and I should follow this KB article hxxp://support.eset.com/kb3734/(I had to do this for last upgrade to 6.1.444.0). I'm seeing these errors in the tracelog file on the ERA Server: 2015-09-09 12:48:05 Error: CRepositoryModule [Thread c30]: GetFile: Cannot connect to host 'repository.eset.com' 2015-09-09 17:10:52 Error: CReplicationModule [Thread e34]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:10:53 Error: CReplicationModule [Thread e34]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:10:53 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:10:53 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:10:53 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:10:53 Error: CReplicationModule [Thread e34]: CStepRx: Failed to receive all objects (expected = 29, processed = 24) 2015-09-09 17:17:30 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:17:30 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:17:30 Error: CReplicationModule [Thread e34]: CStepRx: Failed to receive all objects (expected = 23, processed = 21) 2015-09-09 17:18:09 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:18:09 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:18:09 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:18:09 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:18:09 Error: CReplicationModule [Thread e30]: CStepRx: Failed to receive all objects (expected = 24, processed = 20) 2015-09-09 17:18:15 Error: CReplicationModule [Thread e34]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:18:15 Error: CReplicationModule [Thread e34]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:18:15 Error: CReplicationModule [Thread e34]: CStepRx: Failed to receive all objects (expected = 35, processed = 33) 2015-09-09 17:21:02 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:21:02 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:21:02 Error: CReplicationModule [Thread e30]: CStepRx: Failed to receive all objects (expected = 232, processed = 230) 2015-09-09 17:27:00 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:27:00 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:27:00 Error: CReplicationModule [Thread e34]: CStepRx: Failed to receive all objects (expected = 21, processed = 19) 2015-09-09 17:31:40 Error: CReplicationModule [Thread e30]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:31:40 Error: CReplicationModule [Thread e34]: CStepRx: Data message processing failed with: invalid map<K, T> key 2015-09-09 17:31:40 Error: CReplicationModule [Thread e34]: CStepRx: Failed to receive all objects (expected = 137, processed = 135) 2015-09-09 17:48:37 Error: CRepositoryModule [Thread 13a8]: GetFile: Failed to process HTTP request (status: 20019) Has this happened to anyone else?

I'm noticing a few nodes where "Could not connect to server" is showing up in red. The occurred date is more than a few weeks old and has connected successfully since that date. I can see the error in the logs: 2015-07-05 06:21:40 Error: CReplicationModule [Thread 808]: CReplicationManager: Replication (network) connection to 'host: "XXXXXXX" port: 2222' failed with: (0x79), The semaphore timeout period has expired However, it's connected just fine since July 5th. Can you tell me why the ERA will not clear the problem?

I uninstalled and then reinstalled the latest version which resolved my ERA server version & repository issues. However, majority of my clients failed to update the agent when deployed from the ERA server. I was able to deploy the agent just fine when I first installed ERA 6. Nothing has change so I'm not sure. This is definitely the worst experience that I have had when implementing software at this level.

I have updated it manually. However, I have to remove the the client from the ERA Server (If not, it shows up in Lost and Found) and uninstall the agent locally before I install the new agent. So you are saying I have to touch every client? There is not way to fix the repository issue on the actual server so I can deploy it automatically?

Where would I create a new Agent Installer.bat? When I click "Get Installers", nothing appears under "Packages to Download".

I upgraded to 6.1.437.0 from the previous version and now I'm having issues. I tried deploying the new agent but it's failing with an error "Package not found in repository". I tried downloading it manually from the Agent Live Installers but that is empty as well. I opened up a ticket last Wednesday but haven't heard back from support. I'm just curious if anyone else has has the same issue and if it's been resolved. All of my clients are down because I don't have the correct agent version.

Is there a way to change the format for email notifications? It will only let me add the "%GENERATED_MESSAGE%" to the message body but the format is hard to understand at first glance. It would be nice if you could format it like: Source Machine: Severity: Time of Occurrence:

FYI - This is happening with all of my testing clients. I have to restart the agent to get any threats to show up in the dashboard or notify me through email. Not sure if this is related to my configuration or it is a bug.

Sounds good to me! Appreciate the help and fast response.

Yes, that resolved the issue. Is this a common issue in ERA 6? Should I expect this when I migrate for other clients? Thanks for your help

I have recently installed ERA 6 and I'm in the testing phase. For some reason, I can't get any of my Antivirus threats to show up in the dashboard or the reports. However, I can see them in the client log files under "Detected Threats". Am I missing a setting? Appreciate some help. Thx