bbahes

Hi! I think this was posted before, but I can't find post. We are deploying EES 7.1 clients and we have problem with IP address column in ESMC . It displays IP address of network adapter that is connected to LAN. However, some of our clients use VPN connections. In ERA v5 we got updated with this information as this is address that client uses to communicate on Layer 3. Is there a option to show/update all IP addresses from clients in ESMC interface?

Hi! We are deploying ESMC 7.x and EES 7.1 to our environment. I have created static group MyGroup under main static group All. I have assigned some default policies to MyGroup. Below MyGroup I have created first department group MyDepartment. Under Policies of MyDepartment I don't see policies I have assigned to MyGroup. Do I have to check some option in order for static group inherit policies from parent group? Thanks!

@Marcos Does Endpoint 7.1 align with ESMC 7.0 policies? I am about to deploy ESMC 7.0.72.0 and EES 7.1 and just wanted to check if features like Audit log and Security report are already supported by ESMC 7.0 or there is ESMC 7.1 about to be released that will support new client features? Thanks in advance!

I was thinking more of using EEI feature: "Easily suppress false alarms by adjusting the sensitivity of detection rules for different computer groups or users. Combine criteria such as file name / path / hash / command line / signer to fine-tune the trigger conditions. ". So critical system files/ updates that have correct signature and hash would be excluded from checking.

Looks to me that you could use EEI technology here. Maybe merge two products?

I was about to post question when do you plan to change this behavior...

Can you provide Fortinet FortiOS version, IPS rule that does this? We have Fortigate on multiple location but I have never noticed any corruption. Does this effect v5 or v6 and v7 also?

We used Kaspersky before we switched to ESET v5. We had so many problems with performance and also, at the time, some of our clients used Home versions of Windows clients, that Kasperky does not support. Currently we are at ERA v5 + EES v5 and planning to jump to ESMC v7 + EES v7. With ERA v5 we had to use Windows as server. With ESMC v7 we are considering only Linux virtual appliance. I wish in future, ESET move all products to Linux VA's. There are several factors that drove me as project leader to Linux. Performance, Patch Management, Security, Licensing. Initially I was not happy with v6, but as time is moving, v7 seems logical step in endpoint security management. If you don't like on-premise solutions as I, and your business allows moving solutions to cloud, you might wanna check cloud version and never bother with Patch Management and Security of virtual appliance. Update: There are sometimes problems with major version upgrades on client and server side, but this is all handled either by guys on this forum or by your local support team.

I can't send you private message. Do you have rough time frame of release?

@MichalJ License key and Public ID are same as last year. It should be noted that this is test system and both ESMC and client are in virtual machines which where in saved state. It could be that ESMC did not sync with EBA. For me, confirmation that this is automatic process is solution. Thanks for response!

Description: Automatic product activation on license renewal Detail: I can't find option in ESMC for endpoint automatic license activation after renewal. I only find option on client "Activate this product if you already have a renewal key or a new license." It would be most welcome to have this feature automated. For example, when license is synced with EBA account, automatic activation of endpoint would be triggered either by endpoint like with updates, if you can't access activation server via proxy, then go directly to ESET servers. On my test system I had to create client task to send activation on test client to renew license. Maybe I had to wait a little bit more time before client receives new license?

How soon? 😎

Thanks!

Hi! After releasing All-in-one installer version 7.0.72.2 when do you have plan to release virtual appliance version? Also, how long after releasing new version do you need time to build new ISO? I'm asking because we want to jump to most stable release, preferably to 7.1 if not before. Thanks!

Hi @TomasP ! Can you confirm beta status for 7.1 is still active? Does ESET have any release date in mind for 7.1? We use 5.x and will jump to 7 in near future, but would rather wait for this major release than to go through upgrade process which from my perspective is still unpolished and prone to errors.

Just tested with nslookup -type=TXT rs.dns-oarc.net. seems everything is ok: Non-authoritative answer: rs.dns-oarc.net canonical name = rst.x4090.rs.dns-oarc.net rst.x4090.rs.dns-oarc.net canonical name = rst.x4058.x4090.rs.dns-oarc.net rst.x4058.x4090.rs.dns-oarc.net canonical name = rst.x4064.x4058.x4090.rs.dns-oarc.net rst.x4064.x4058.x4090.rs.dns-oarc.net text = "212.91.113.208 DNS reply size limit is at least 4090" rst.x4064.x4058.x4090.rs.dns-oarc.net text = "212.91.113.208 sent EDNS buffer size 4096" rst.x4064.x4058.x4090.rs.dns-oarc.net text = "Tested at 2019-01-26 16:15:01 UTC"

Hi! Looking at DNS flag day (https://dnsflagday.net), I wonder, does EES firewall support EDNS in v5 product line? Or is this something of no concern for end client? Thanks!

@Marcos What method would you suggest for firewall logging in ESMC v7? For example, we install new application that needs to access various network resources. We don't get clear specification from vendor on ports, so we need to use various forms for network capture. What would be best method to get logs from client to ESMC for specific application network usage?

I was able to add this path to Firewall rule. Where are you adding this rules?

Don't disable integration with Outlook. Try playing with options in Email client protection. First make sure Disable checking upon inbox content change is checked. We use O365 and EES v5. We had similar problem and after turning this option on it went away.

Actually it's not firewall, rather feature that is located in this location in policy. Here is client side:

As I understand, ESET Endpoint Antivirus v5 is blocking access? If that is true, than in ERA v5 you need to edit policy that is applied to all clients and go to: Windows Desktop v5 > Personal firewall > Settings > Web access protection > HTTP address management: See dialog (and select Edit in right pane of Window). There you have three lists: 1. List of addresses excluded from filtering 2. List of blocked addresses/masks 3. List of allowed addresses Enter your URL to 1 and 3. If you have enabled Web Control, then under Windows Desktop v5 > Web Control > Rules: See dialog (and select Edit in right pane of Window) add your url in Rule Editor to URL-based Action with Action set to Allow.

As far as I know, no. I asked them long time ago, will they offer https://www.uservoice.com/ but I did not get answer.

Description: Change CONNECT option from RDP to VNC on client.Detail: Please add ability to change RDP connection to client to VNC.

If I understand correctly. Only Agent is communicating with Update servers, Live grid, ESMC and Security product is talking only to Agent?