kamiran.asia

Hi Dear ESET admins. One of our Customers report a Bug in all Version of ESET ( Business V7 + Home V13) : In Password Protected Security Products , When user Disable firewall by right click menu in tray ( Pause Firewall - Allow All traffic ) , user can bypass the password easily ! When password windows appear , just by clicking Pause Firewall - Allow All traffic again in right click menu , Firewall will be paused with out password. It means that when you click Pause Firewall - Allow All traffic twice while password windows is on the screen , Firewall will be paused with out entering password.

7.0.577.0

for more information , there is no problem when we use Agent v6.5 !

Full Agent Log is attached. trace.log

Hi Dears. We have one client with Agent V7 with this error log and it will not connect to console correctly : 2020-01-28 07:05:15 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:05:15 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:05:15 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:05:15 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (OUT_OF_ORDER), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:06:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:06:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:06:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:06:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:06:17 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:06:17 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:06:17 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:06:17 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (OUT_OF_ORDER), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:07:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:07:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:07:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:07:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:08:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:08:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:08:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:08:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:09:01 Error: AuthenticationModule [Thread e3c]: EntityAuthenticationCommand execution failed with: Request: Era.Common.Services.Authentication.RPCInitiateAuthenticationRequest on connection: host: "172.16.0.18" port: 2222 with proxy set as: Proxy: Connection: :3128, Credentials: Name: , Password: ******, Enabled:0, EnabledFallback:1, failed with error code: 14, error message: OS Error, and error details: 2020-01-28 07:09:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:09:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:09:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:09:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:10:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:10:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:10:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:10:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:11:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:11:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:11:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:11:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:12:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:12:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:12:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:12:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:13:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:13:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:13:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:13:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:14:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:14:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:14:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:14:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:15:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:15:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:15:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:15:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] 2020-01-28 07:16:01 Error: CReplicationModule [Thread 26a0]: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity) 2020-01-28 07:16:01 Warning: CReplicationModule [Thread 26a0]: InitializeConnection: Not possible to establish any connection (Attempts: 1) 2020-01-28 07:16:01 Error: CReplicationModule [Thread 26a0]: InitializeFailOverScenario: Skipping fail-over scenario (missing last success replication link data) 2020-01-28 07:16:01 Error: CReplicationModule [Thread 26a0]: CAgentReplicationManager: Replication finished unsuccessfully with message: InitializeConnection: Initiating replication connection to 'host: "172.16.0.18" port: 2222' failed with: GetAuthenticationSessionToken: Received failure status response: AUTHENTICATION_FAILED (Error description: unable to authenticate entity)Replication details: [Task: CReplicationConsistencyTask, Scenario: Automatic replication (REGULAR), Connection: 172.16.0.18:2222, Connection established: false, Replication inconsistency detected: false, Server busy state detected: false, Realm change detected: false, Realm uuid: 00000000-0000-0000-0000-000000000000, Sent logs: 0, Cached static objects: 0, Cached static object groups: 0, Static objects to save: 0, Static objects to delete: 0, Modified static objects: 0] What is the Problem ?

We have Support Ticket ESET ME (CASE:55720) , But we do not receive any update . Last update From Support : " We will share the logs with our developers and get back to you once we have an update from them. " Because this Case is special , we manually edit Update.ver and delete all modules except Engine and some necessary modules, ... , while this way is a security risk because not all of modules are updated and just Database Engine is updating but better than loop restart. in this way we can check module by module to check wittch one cause the problem but our customer have not enough time to do these tests.

It is about 20 days and no solution have been found yet. All these systems can not be updated any more and we have freeze their update.

Hi Dears. As you now IDS and Network Attack protection will not install on Server 2008 R2 by Default. My Question is Why ? And if we manually install it via Repair option in Control Panel or Advanced option in installation dialog , is there any conflict with Server 2008 R2 ?

The issue is same in V5 - V7. Even NOD32 Home Edition V8

Hi Dear @itman , No AMD patch is installed , This problem is happened suddenly after ESET update from beginning of December. All Old PCs with Old AMD Cpus + XP Sp3 restart after Windows Logo. It seems that there is a ESET module conflict with these old systems.

We have still same problem in Old AMD Cpu , do new update solve issue for any one ?

Still involved with this problem and waiting for New Version of Mirror Tool. Any update right now ?

Thank you Dear @Marcos , but unfortunately Loop Restart even with Firewall Module 1398 , As this problem is accrued in ESET nod32 Home Edition too we Think Firewall Module is not involved.

Disabling HIPS & AS will not help in this case.

Restart issue is persist even with Pre-Release updates. ( HIPS 1379.1 and AS 1157.1) System will still restart after Windows XP Logo. ESET Log Collector : https://we.tl/t-VbhWgmzERs Is there any way to disable updating problematic module ? Are You are Sure that HIPS or AS cause this problem ? Can we disable some modules via [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\InstalledVersionInfo\Groups] ? And do you think is it useful for troubleshoot this case ?

Dear @Marcos Is there any Pre-release update for Anti-Stealth module at Pre-release servers right now ?

Ok we will test HIPS 1377.1 .

Dear @Marcos It means that if we change update server to Pre-release the issue will be solve right now ?

Memory Dump is not Generated automatically and Manual way did not work in this case because of loop restart. ESET Log Collector is send via Priveate message dear @Marcos.

No BSOD , No Black Screen. Just Windows restarted after windows XP Logo ( Before Logon Screen ) Can our customer generate Memory Dump in this case ? According to article full memory dump can not be generated when we have loop restart issue.

No BSOD , No Black Screen. Just Windows restarted after windows XP Logo ( Before Logon Screen ) Memory Dump and ESET Log Collector will be generated soon.

Any Opinion ? Still they can not update the Clients. After Update windows will not load.

Restoring em...dat files in V6.5 and Modules Folder in V7.0 with older module update will solve the restart problem temporary.

Renaming all These items not solve the Logon Restart problem: C:\Program Files\ESET\ESET Endpoint Security\Drivers C:\Windows\System32\drivers\eamonm.sys C:\Windows\System32\drivers\ehdrv.sys C:\Windows\System32\drivers\epfw.sys So even when drivers is not loaded system will restart.

We are ESET ME partner company and It is not possible right now in some special cases for our special customers.