Jump to content

tbsky

Members
  • Content Count

    161
  • Joined

  • Last visited

  • Days Won

    2

Everything posted by tbsky

  1. ready for testing. will 6.4 be out soon or wait a few month?
  2. hi: today I re-test the same web page. and endpoint didn't bother me this time. so the virus db update did fix the problem. may I ask is it a fixed bug or some kind of false alarm? since endpoint didn't give me any warning, if it is a false alarm I m worried it will happen again in the future, and it is hard to discover what's wrong. thanks for your kindly help!!
  3. hi: I am using endpoint antivirus 6.3.2016.1. when I access some web page of our internal website and try to upload data, the upload process failed silently. for now, I met only one specific page that will fail. disable antivirus won't help. exclude the internal ip address for filter did help. but since there will be some http process failed silently, I am now worried about enable protocol filter. is this kind a bug or it's something like virus false-alarm so it will happen sometime somewhere? thanks for help!!
  4. @Mherwa yes I know my problem is different than yours. but since it is also related to agent uninstall so I think maybe I should put them here. and I think you will meet the same problem soon if you install/uninstall many times. in fact I got into similar situation like your case once. one time the uninstall process was unsuccessful and I lost patience so I just reboot. after reboot the agent disappear from the control panel program list, but the dead body still exist in c:\program files and in windows registry. I try to reinstall agent but it refuse to install. I tried to delete agent
  5. hi: if I want to uninstall agent at windows with UAC enabled via control panel, it will pop the message below. (although this message is unrelated to success/failure of uninstall). endpoint product is fine with UAC.
  6. hi: I am testing ERA6 now with two PC and one server. so I install/uninstall agent/endpoint many times. quite often the agent refuse to uninstall because it can not stop the service. I must set the agent service as a "stopped" service and reboot, then I can uninstall the agent. it seems not related to endpoint installed or not. I just uninstall an agent with endpoint installed smoothly. if you need more info for testing, please tell me. I am always doing install/uninstall these days.
  7. hi: thanks for the hint. I now create a report to view the information. there is really a lot to learn with EAR6
  8. hi: I apply an offline license to ERA server for testing no-internet environment. but after distributing the license to clients, I found I can not see how many clients are using this offline license. the ERA web console seems can only show the total seat of offline license, but can not show how many clients are using it. am i miss something? thanks for confirm.
  9. Wow! the situation you described is really a mess! thanks again for your invaluable information in this thread!
  10. hi: I am leaning ERA 6 policy by checking system default policy rules. but I encounter rules counting question. as you can see in the attached screenshot, there are 4 rules listed, but ERA count the rules as 5. if I press the "delete" icon and then press the "+" icon, ERA count the rules as 4. is there hidden rule that I can not see in the system default policy? thanks a lot for confirm!
  11. hi: thanks for your detailed explanation! so let me summarize: in ERA6, the unique identifier may create/trigger at client (when install agent manually at client side) or server (when create computer entry manually or by sync process at server side). in later case, we should use "agent install task" to install agent, or there will be duplicate entries. this is really different than EAR5. since we use vbscript to to install Eset products, now I have to keep this process in mind. but there is one thing I don't understand. you said "ERAv6 identifies clients not by HW, but by i
  12. hi: i am confused about "server <-> agent" identify process in ERA6. in ERA 5: when client connect to ERA server with correct password, server with create an entry with client hostname and remember the client token (I don't know how the internal works, but with the token server can identify this specific client?). if I reinstall OS, when client connect to ERA server, server will create another entry with same hostname. and there is a setting in ERA5 to merge these entries if their mac addresses are the same. so even if I reinstall OS ,ERA5 still can maintain correct client
  13. hi: thanks a lot for your confirm. now I understand. I do see these modules in the "about" tag of ERA web console.
  14. hi: I am studying the logic of ERA 6. I saw there is setting under web console: admin-> server settings -> updates but as I know the virus definition update in version 6 is working at cache server or mirror server. so what update did ERA6 do at this page? will it update itself or other things? thanks a lot for confirm.
  15. hi: forgot to mention. I install ERA 6.3 under rhel 7.2 and MariaDB 5.5 about 10 times. every time it is success. so the installer didn't block installation on MariaDB database. but I really hope Eset can consider make MariaDB work. every major linux distribution ship with MariaDB now. MariaDB is much faster than mysql 5.6 under rhel 7.2. I saw Eset use many store procedures. it seems the trigger of store procedures under MariaDB cause problem. Seems I made mistake in assumption that detection made it into 6.3 release -> it will be available in upcoming release ...
  16. hi: forgot to mention. I install ERA 6.3 under rhel 7.2 and MariaDB 5.5 about 10 times. every time it is success. so the installer didn't block installation on MariaDB database. but I really hope Eset can consider make MariaDB work. every major linux distribution ship with MariaDB now. MariaDB is much faster than mysql 5.6 under rhel 7.2. I saw Eset use many store procedures. it seems the trigger of store procedures under MariaDB cause problem.
  17. hi: after testing I found two things. 1. I install mysql 5.6 to replace mariadb 5.5. and now the "computer rename task" did run every hours. with mariadb 5.5 it seldom runs. with mariadb 5.5 there are many strange behaviors, I will create another thread to discuss it. 2. it seems I don't need reverse dns resolving. agent find out computer name, and "computer rename task" use that name to replace ip address. I just don't understand why not use the computer name at first place? maybe ip address is a better choice to prevent conflicting at first place? but if client comes in with n
  18. hi: try to run the task manually but I can not see whether the task is running. and the computer name is still ip address. I test delete/install the agent many times. I remember at some point I could see the hostname as pc name. but now I think my era server is broken. I will try to reinstall it. I am using rhel 7.2 and mariadb. I see some forum posts indicate that era server may have problem with mariadb. if I fall back to mysql, what version would Eset recommend? 5.5 or 5.6 or 5.7? thanks a lot for confirm. You did not mention ERA version, but In case computer is name IP
  19. hi: try to run the task manually but I can not see whether the task is running. and the computer name is still ip address. I test delete/install the agent many times. I remember at some point I could see the hostname as pc name. but now I think my era server is broken. I will try to reinstall it. I am using rhel 7.2 and mariadb. I see some forum posts indicate that era server may have problem with mariadb. if I fall back to mysql, what version would Eset recommend? 5.5 or 5.6 or 5.7? thanks a lot for confirm.
  20. hi: I am trying to install era6 agent at test pc.i try to use server-assisted & live agent installation. but the windows pc name shows as ip address in the "lost & found", not host name. in ERA5 the pc name is hostname. is this behavior normal? thanks for confirm.
  21. hi: yes I read that KB and the parameter meanings of the KB is understandable. but from live agent installer batch file I saw other parameters, which I don't know like "P_CONNECTION_CHOSEN=Host". also I would like to know if there are parameters about the nod32 package... thanks a lot for help!! Regards, tbsky when I asking the question I was modifying the script. now I met the problem. I want to silent install the package "avremover_eea_nt64_enu.exe". what's the necessary parameter to finish the job? also when I test removing the agent, I found it may set p
  22. hi: yes I read that KB and the parameter meanings of the KB is understandable. but from live agent installer batch file I saw other parameters, which I don't know like "P_CONNECTION_CHOSEN=Host". also I would like to know if there are parameters about the nod32 package... thanks a lot for help!! Regards, tbsky
  23. hi: yes I know v6 is different from v5. I will use script to install/upgrade both agent and nod32. I just want to know what parameters I can use at the script. thanks again for help!
  24. hi: I am new to ERA6. we use custom vbscript to install nod32 version 5 products. now I need to modify the script so it can work for version 6. after checking the KB article and the batch file from the Live Agent Installer, I can see I need to add some parameters. like for Agent_x64.msi, I need to add "P_CONNECTION_CHOSEN=Host". but what's the meaning of the parameter? I can not find the explanation. are there documents for all the possible parameters? I also want to know the install parameters like "eea_nt32_enu.msi". in version 5 we have many parameters to use. I think in version
  25. Agent installed side-by-side SERVER will provide specific OS information for reports showing ERA infrastructure. In current release, omitting AGENT installation should not affect may functionality of ERA.. But we do not recommend it because it may change in the future. Are there any specific reasons for not installing AGENT in your environment? it's just I don't install useless software at my linux server. so I don't need to take care/maintain them. so you mean although agent is not necessary for ERA server now, but it maybe needed in the future? so I guess I should install it
×
×
  • Create New...