Jump to content

bbahes

Members
 View Profile  See their activity

  • Posts

    521

  • Joined

  • Last visited

  • Days Won

    5

 Content Type 

Posts posted by bbahes

    ESET products - online purchase

    in General Discussion

    Posted · Edited by bbahes

    10 minutes ago, PodrskaNORT said:

    Hello,

    You can order renewal on https://nod32.hr/obnova

    BTW, how come you have been waiting 15 days for an answer on this Forum while knowing that we reply in minutes when you contact us directly? As an old customer you have all our contact e-addresses.

    BR

    Tomo

    Hi Tomo,

    Yes I had contact with your sales already.

    The form just sends your team my order and I receive offer I can pay using bank account.

    I was asking for renewal payments via VISA cards, Paypal...etc...


    Boris.

     

    PS. One benefit of this would be to auto charge my card when license is about to expire.

    ESET products - online purchase

    in General Discussion

    Posted

    Hi,

    Not sure if it's right forum, if not feel free to move it...

    I'm considering license renewal as home user, however I don't see that ESET ever made online store for users in Croatia. Instead we are redirected to Croatian reseller from who we receive offer which we pay via normal banking account.

    I won't go into prices of renewal, but does ESET consider making online purchase normal thing?

    Thanks.

    Endpoint Security v7 is unable to block youtube video streaming in Chrome

    in ESET Endpoint Products

    Posted

    On 6/8/2019 at 8:15 AM, Marcos said:

    Does disabling QUIC protocol in Chrome make a difference? https://support.eset.com/kb6757

    Will new application filtering feature announced for future 7.x version of endpoint clients be able to control these situations?
    We have situations where clients roam outside corporate network and we would want to be able to control things on application level.

    Thanks!

    ESET Endpoint Protection constantly disabled - why?

    in ESET Endpoint Products

    Posted

    1 minute ago, Marcos said:

    Seems to be the same issue probably with registering callouts to Windows Filtering Platform. Please provide logs from the machine as per the instructions above.

    What user did in the end is restarted machine. After that alerts went away. We talked to user and he told us that he did not shutdown notebook in Start > Shutdown way but he just closed lid. After he resumed notebook from sleep state this alert started.

    Modules update failed EES 7.1

    in ESET PROTECT On-prem (Remote Management)

    Posted

    This is what I see in /var/log/httpd/error_log file:

     

    [Mon May 06 09:16:32.930991 2019] [proxy_http:error] [pid 29607] (70007)The timeout specified has expired: [client 192.168.224.8:49679] AH01102: error reading status line from remote server update.eset.com:80
    [Mon May 06 09:16:32.931042 2019] [proxy:error] [pid 29607] [client 192.168.224.8:49679] AH00898: Error reading from remote server returned by hxxp://update.eset.com/ep7-dll-rel-lb/mod_049_horusdb_4350/em049_64_l0.dll.nup
    [Mon May 06 09:29:08.351585 2019] [proxy_http:error] [pid 4953] (70007)The timeout specified has expired: [client 192.168.224.8:50128] AH01102: error reading status line from remote server update.eset.com:80
    [Mon May 06 09:29:08.351623 2019] [proxy:error] [pid 4953] [client 192.168.224.8:50128] AH00898: Error reading from remote server returned by hxxp://update.eset.com/ep7-dll-rel-stop1/mod_049_horusdb_4350/em049_64_l0.dll.nup

    [Tue May 07 09:07:03.708265 2019] [proxy:error] [pid 4185] [client 192.168.224.8:49861] AH00898: DNS lookup failure for: i3.c.eset.com returned by hxxp://i3.c.eset.com:80/
     

    192.168.224.8 was client that had problem with update on monday.

     

    Also I see many (not too many) messages about DNS lookup failure. Is this something I should look on my side, ISP side? 

    cat error_log | grep -o "DNS lookup failure" | wc -l
    64 

    Threat reported via notification, not in ESMC Threats page

    in ESET PROTECT On-prem (Remote Management)

    Posted

    25 minutes ago, MartinK said:

    Could you please double-check filters used to show threats of this device in console? Especially time interval and severity filter should be set in a way all threats are shown. It is possible that it has no "information" severity and thus possibly not shown in console by default.

    Could you also check "Filtered websites" tab in client logs? This one is collected by ESMC, but not shown in threats view (was integrated to future release).

    You are right! Default filter is to filter resolved threats. In this case, JS/AdWare.Agent.AF was resolved on client by connection termination so it did not show up in Threats page.

    Thanks @MartinK

     

    Threat reported via notification, not in ESMC Threats page

    in ESET PROTECT On-prem (Remote Management)

    Posted · Edited by bbahes

    Hi!

    After deploying EES 7.1 to 50 clients we have one reporting (notification to e-mail for Malicious file detected (trojan / worm / virus / application) enabled in Notifications) "Malicious file JS/Adware.Agent.AF was detected on computer ..."

    image.png.bea6c1b79206d598107cb9ed46fcd7ef.png

    However, I don't see threat reported in THREATS page in ESMC, but neither on client details > alerts page.

    We are using default policies and have only 3 that Append firewall rules:

     

    image.thumb.png.1f08b8328ff1b0a851dc62d661d4622f.png

     

    Is there something else we need to configure ?

    Duplicate IP addresses on network cause by VPN and RDP

    in ESET Endpoint Products

    Posted

    30 minutes ago, Zurd said:

    You should have posted this before or just answered my questions better and we wouldn't have wasted so much time.

    You should add this information about IDS exceptions of duplicate IP in your knowledge base, that will save time for others: https://support.eset.com/kb3430/?viewlocale=en_US

    Not siding with ESET support, however, this is basic networking knowledge, not ESET endpoint problem. 

    Query over TLS1.0

    in ESET PROTECT On-prem (Remote Management)

    Posted

    1 hour ago, Marcos said:

    You can accomplish this by enabling advanced security in the ESMC server setup and re-regenerating CA and peer certificates.

    image.png

    If I do this now, what steps would I need to take in order for current clients to communicate correctly with ESMC?

    Second question, why is this not on by default?

    Maybe you could make checkbox in initial wizard to ask during deployment for protocol TLS 1.0, TLS 1.1 or TLS 1.2 ?

    Multihomed host - ESMC 7.x

    in ESET PROTECT On-prem (Remote Management)

    Posted

    9 minutes ago, bbahes said:

    Hi!

    I think this was posted before, but I can't find post. 

    We are deploying EES 7.1 clients and we have problem with IP address column in ESMC . It displays IP address of network adapter that is connected to LAN. However, some of our clients use VPN connections. In ERA v5 we got updated with this information as this is address that client uses to communicate on Layer 3.

    Is there a option to show/update all IP addresses from clients in ESMC interface?

    I see there is column REMOTE HOST that shows VPN IP's. I will try and use information from that column.

×
×
  • Create New...