Jump to content

tbsky

Members
 View Profile  See their activity

  • Posts

    231

  • Joined

  • Last visited

  • Days Won

    3

 Content Type 

Posts posted by tbsky

    offline usage and livegrid security warning

    in ESET PROTECT On-prem (Remote Management)

    Posted

    On 2017/8/28 at 9:08 PM, Peter Randziak said:

    Hello,

    the question is if are the machines on-line i.e. able to access ESET servers.

    If yes, you should enable the LiveGrid for sure as it is very effective and crucial technology to combat emerging and quickly spreading threats.

    Regards, P.R.

    no, the machine is not online. I  enable LiveGrid for online machines and disable LiveGrid for offline machines. now offline machines warns about critical security problem because disabled LiveGrid. how to solve the situation?

    endpoint av 6.6 can not update from offline mirror

    in ESET PROTECT On-prem (Remote Management)

    Posted

    hi:

       I just upgrade our ERA server from 6.4 to 6.5, so I think I should try latest endpoint product. I download the latest endpoint antivirus (6.6.2046) and found it can not update virus signature from our offline mirror server. after checking mirror server apache log, I found 6.6.2046 want to access a strange url like "http:/xxxx/eset_upd/ep6/dll/update.ver". previous versions the url is "http:/xxxx/eset_upd/ep6/update.ver" which is matching the mirror tool directory structure.

    but the new version want a "dll" directory.

    I try latest mirror tool but it still doesn't create "dll" directory structure. so I don't know what happened.

    thanks a lot for help.

    MariaDB official support

    in ESET PROTECT On-prem (Remote Management)

    Posted

    8 hours ago, foneil said:

    The only information I have is that there has been a market request already to add MariaDB, but I don't know how long that could take. 

    As you know, it's not officially supported, but we are aware of its use--if it is was added to future build, we would be sure to clearly communicate that and update the FAQ as well:

    thanks for the news.

    we want MariaDB too. it is now the standard of linux world

     

    web console login issue

    in ESET PROTECT On-prem (Remote Management)

    Posted

    By reboot server you mean whole operating system or only SERVER's service? What is the average delay until login is possible - or it is always at least 10 minutes? We have seen similar behavior in case database connection could not be established immediately - for example because database is not ready for incoming connections - this may happen especially after operating system startup. Once this happen, we wait for some time until another attempt is made, but it should not be more than minute.

    My recommendation is to check SERVER's trace.log (even if default logging verbosity is used) and search for "Kernel" -> you should be able to see startup and shutdown sequence, i.e. "Loading", "Initializing" and "Start" of modules -> where time differences may point us to responsible module and possibly operation that is causing startup issues. There is also possibility that your database is extremely slow - is it installed locally on the same system as ERA Server?

     

    Could you provide more details of platform, ERA installation steps (used all-in-one installer?) and your browser type and version? Have you tried to open login windows also with different browsers?

     

    On screenshot we can see that login screen is not properly loaded ... is this how it looks like during login attempt => after you clicked login, or even before form is shown? What error message is shown in case login fails? There should be also relevant "Error" in SERVER's trace log, it may contain more detailed error message.

    hi:

       by reboot I mean reboot the server.

       actually the situation of ERA 6.4 is good enough for me. I just need to clear the browser cache sometimes and things can go on. I don't need to do anything at server side.  I always use firefox, so I don't know if other browser will met this situation.

    web console login issue

    in ESET PROTECT On-prem (Remote Management)

    Posted · Edited by tbsky

    Regarding slow login after SERVER boot: this may be related to execution of "missed" task. for example if your SERVER is not running during midnight, database cleanups will be executed just after next startup and that may result in similar behavior. There may be also other tasks causing this issue.

     

    Inability of login screen initialization is something I have not see for long time. Could you please check system resources on machine where tomcat is located during login screen load? Maybe there is insufficient memory? Or very slow disk?

     

    hi:

       reboot the server and login asap will delay, so it seems not midnight problem.

     

       clear browser cache fix my second problem immediately.  reboot the pc or server is useless. I have met the situation several times.

     

     the server loading is idle when I can not login. but I don't know how to reproduce it.

    web console login issue

    in ESET PROTECT On-prem (Remote Management)

    Posted · Edited by tbsky

    hi:

       when I test ERA 6.2 & 6.3, the web console is unstable, sometimes it can not login, sometimes it dies and need to restart tomcat.

       ERA 6.4 is much stable, I don't need to restart tomcat anymore. but I still notice 2 issues:

     

      1. if try to connect ERA when ERA server is booting, it will wait for very long time (like 10 minutes) to show the login screen. it seems like ERA is unhappy to be interrupted when starting.

     

      2. sometimes I can not access the login screen. reboot the computer or reboot the ERA server won't help. clear the browser cache helps. I am using firefox under windows 7.

    when access ERA the browser try hard but only show screenshot below:

    post-4997-0-38757600-1474353547_thumb.jpg

    product activation error

    in ESET PROTECT On-prem (Remote Management)

    Posted

    Hi:

        I have found other ways to solve my problem. but I would like to report:

     

    1. client task trigger with throttling is very buggy. many items can not be saved. but I think these are known bugs, since the client task component is full of bugs, maybe they will be fixed all together.

     

    2. policy apply and client task are racing when computer joins a group, cause unstable result. maybe Eset can add a dynamic group filter rule like "client policy already applied". so client task can decide if it would like to run before or after the policy applied.

    No progress count

    in ESET PROTECT On-prem (Remote Management)

    Posted · Edited by tbsky

    In client tasks page, the field 'PROGRESS' is empty. Like the screenshot in the below:

     

    attachicon.gifera.png

     

    If I select any one of these client tasks then choose 'Show successful', 'Show failed'... there are history execution records in there.

     

    How fix it?

     

    ERA Server v6.4.304.0

    ERA Web Console v6.4.266.0

    OS: Ubuntu 16.04.1 LTS

    MySQL 5.7.13

     

    Thank you.

     

    hi:

       my ERA/web console version is the same as yours. but OS is rhel 7.2 with MySQL 5.6.  the progress field is fine. have you tried reboot ERA server?

     

       by the way, can MySQL 5.7 use with ERA 6.4 now? I remember in ERA 6.3, Eset said only MySQL 5.6 will work correctly.

    when will seat ID generated?

    in ESET PROTECT On-prem (Remote Management)

    Posted · Edited by tbsky

    Hello tbsky. Seat ID is generated upon a part of the process, which is called "association". This happens, as a part of the activation scenario, when client installation first contacts ESET Licensing server.

    This happens in two cases: 

    1. Normal activation - client is activated using license key / security admin account, and it connects intentionally to edf.eset.com to register
    2. Silent association - to verify offline file potential misuse. Client is activated using offline license, however it still tries to reach edf.eset.com. When it succeeds, seat is generated. 

    I (or some of my colleagues) will post a second response, concerning the "seat ID" information. 

     

    hi:

       thanks for the clarify! it's much clear for me now. wait for second response...

    when will seat ID generated?

    in ESET PROTECT On-prem (Remote Management)

    Posted

    Hi:

       I am confusion about the status of seat ID. I found generally client with  offline license has no Seat ID.

    but I found situation below:

     

      1. client with offline license has seat ID.

      2. client with online license has no seat ID. (ghost license)

      3. client shows no seat ID, but ERA shows client has seat ID.

     

    and I don't know where to check client seat ID at ERA. I can only use Dynamic group to category client with seat ID regex filter(so I know ERA's view about client seat ID). Am I miss something?

     

     thanks a lot for help!!

     

     

     

    product activation error

    in ESET PROTECT On-prem (Remote Management)

    Posted

    Could you please provide details about the used dynamic group template?

    It might happen, that when you have used a condition "installed aplication name" fir the dynamic group, it will hit before the agent has established the connection with the endpoint, as it gets the installed software name from the Operating System. Please add also a condition for "managed product mask", with the "security product" (little monitor icon). This would prevent the task from triggering before the agent/endpoint communication is fully established.

     

    hi:

        thanks for the suggestion. I didn't see "There is no product supporting given task" error now.

     

        but the task still sometimes failed. after testing I realized the reason is I have different policy (include proxy settings) and different client task for different groups. and when computer shows on the group, the policy apply and client task are racing. many times the client task will run before policy apply, and it failed because proxy setting is not there yet.

     

      since I can not tune the order of policy apply and client task running, I try to delay client task. but no matter what I set at "Throtting", when I click finish nothing is saved. can "Joined dynamic group trigger" working with "Throtting"?

     

      thanks a lot for help!!

      

    policy UI inconsistent

    in ESET PROTECT On-prem (Remote Management)

    Posted

    Hello, this is related to the "configuration engine/ support module". This component is updatable remotely, via an updateable module, and it might happen that a different version is used locally (by product) and different version is on server.

    On September 7 we have released a new set of windows server products, with new configuration (policy) options. To support this release, we have also published a newer configuration module, which resolved the issue for you.

    Server restart / console logout / login might be needed for all changes to fully take effect.

    I don't know if my system is up to date. my version is:

     

       Configuration module1277.15 (20160721)

     

    but the situation is the same. in the "request configuration" I can not see the missing part.

    policy UI inconsistent

    in ESET PROTECT On-prem (Remote Management)

    Posted · Edited by tbsky

    hi:

        I have problems with endpoint settings, so I request client configuration from ERA. but the configuration opened at ERA is missing the "Email clients" part at "Email client protection" section. screenshot  shows the difference.

     

       and my real problem is, when the client software installed and get policy from ERA server for the first time, some settings for the "Email clients" will be disabled (as I red marked at first screenshot). I am sure I don't have that policy in ERA server. and the disabled settings can be reset at client side, so it is not a ERA policy. but I really don't know where they came from. any hint for the strange situation?

    hi:

       the strange situation of "Email Client protection disabled" went away after I reboot the ERA server. so I may trigger hidden bugs when I configure the ERA server, or maybe ERA component daily update without reboot cause it. I am lucky that reboot solve the problem.

     

       but I still don't understand the inconsistency of configuration UI between ERA and endpoint client. is this a bug or feature?

    product activation error

    in ESET PROTECT On-prem (Remote Management)

    Posted

    Hello tbsky,

    This error is typically produced when running the activation task on a target that does not have a supported ESET product. Please view the computer details of the target, and check the installed applications tab to verify if the Agent is reporting an ESET Security product as installed. You can do this through the task details. Click on the failed task, select 'show failed', find your computer, click on it, then click 'Details...'

     

    Best,

    Eric

    hi:

        the task is triggered by join dynamic group. the dynamic group template rule is endpoint product installed or unactivated. so I don't know why the task is triggered but it said does not have supported product. if I re-run the task manually again, it will success.

    software package install parameter

    in ESET PROTECT On-prem (Remote Management)

    Posted

    Hello, concerning the uninstallation password parameter, this is documented in ERA console itself, in the tooltip for the uninstallation task, and in the screen for "installed applications", when additional pop-up with request to specify uninstallation password is displayed.  For what you would like to assign a license file in case of V6? V6 is activated either using offline file, or activation task, other activation methods are not supported (package installer allows activation using the silent token, however only ERA is able to generate this one).

     

    ok! thanks for your confirm!

×
×
  • Create New...