eornate

HI everyone, I'm new in Eset Inspect , and i'm looking for how to send email alert to admin when the endpoints are violated rule defined. So how to i can do that ? Thanks.

Hi everyone, I had the issue with Eset protect server webconsole. My server does not appear option Investigate (Inspect) ( i installed eset inspect server with this Eset server ) It should be that below : How to i can enable this option ?

Thanks your information.

Hi everyone, Is there solution for mangage Workstation ID ESET FULL DISK on ESET PROTECT web console ?

Hi everyone, I had the issue with generate reports about Device control connected (allowed /blocked ) clients from eset protect server.As far as i rmember, 2 months ago, i can view the reports about Device control connected (allowed /blocked ), but today the report does not show any information ( include the old report before). So is there the solution for generate reports to view all Device control connected (allowed /blocked ) clients from eset protect server ? And on clients, And do i need config what kind of Logging severity ?

Hi everyone, have you been see the issue like this photo, i setup new eset server version 11, in the Groups which was not count the client : All (not appear quantity client)

Thanks your suggestion.

Hi everyone, Currently, many customers complained about the Web control was not work on browsers , which (QUIC) Protocol is ENABLEd status. After DISABLED, it worked. So the customers had to face about this feature will not working if user change QUIC protocol and they can not control that issue. How to resolve this issue ?

Hi everyone, I have a question about Server certificate . When install eset portect sever, in field "Host" , i filled "*" => if i change computer name of server or join the server to AD , Does it have any effect for connection from clients to server? When install eset portect sever, in field "Host" , i filled "name server" => if i change computer name of server or join the server to AD , Does it have any effect for connection from clients to server? Thanks in advanced.

Thanks your response.

HI everyone, Today i created a rule block Category " Social networking" on my endpoint, How do I check what the urls are defined in? Thanks in advance.

Hi Peter, Today, my customers reported the same issue.This issue may be occurred on some customers.

Hi itman, Thanks your response. How to can i know this alert is false positive or true positive ? I mean that may be one of my endpoints has infected and it try scan or poisioning my local network ?

Hi everyone, Hope you're doing well. On my logs endpoint, i received many alert about "ARP Cache Poisoning attack " : Ip 172.16.2.100 is static ip. I've checked on this ip 172.16.2.100 , it just have 1 mac-address as SOURCE [00:0c:29:94:7b:98] And on my endpoint , which is alert ARP Cache Poisoning attack So , how do i can resolve this problem ?

Hi, In my client , it was displayed : warning: the compiler differs from the one used to build the kernel dev-12 check_start.sh[3449431]: The kernel was built by: x86_64-linux-gnu-gcc-11 (Ubuntu 11.4.0-1ubuntu1~22.04) 11.4.0 dev-12 check_start.sh[3449431]: You are using: gcc-11 (Ubuntu 11.4.0-1ubuntu1~22.04) 11.4.0 dev-12 systemd[1]: eea.service: start-pre operation timed out. Terminating. dev-12 systemd[1]: eea.service: Control process exited, code=killed, status=15/TERM

Thanks your suggestion. At this time , the server can load protuct from repository default. I don't know why the server before can not load, You can see from 5:46 pm, the server still can not load products from "AUTOSECLECT" although i tried many ways as i said early so that i posted this topic. And now at 6:15 pm, server can load products that i expected. As i expected, is there the way to server can load repository ( AUTOSELECT or local repository path) immediately ?

Hi Marcos, After change repository, i restarted ESET PROTECT server service , even restart the server after that.

Hello to all of you. I hope everything is okay with you. I'm writing to let you know about the repository problem on the Eset Protect server. I updated the server repository from "AUTOSELECT" to my local path repository, such as "hxxp://localhost:8080/repository-final." and the server loaded the products from repository local. After that, when I changed the server repository to "AUTOSECECT" then, the server was not loading products from the default server repository. I attempted to solve it using these methods, but it didn't work: -visit this website: The eSet Protect Repository isn't Working: https://support.eset.com/en/kb7811 -Restart the Eset Protect server (using services.msc) -Clear the browser's cache -Clear the ipconfig /flushdns cache -Restart the server numerous times. I hope anybody can help me for this issue. Below are screenshots and trace.log on my server. P/s : are the the solution to ESET protect server can update repository immediately ? Thanks for attendence. trace.log

Hi Marcos, Do you have any suggestions for this ? Today i met the same issue with local repository, server can not load products on LOCAL REPOSITORY. Even i restarted server many times.

Thanks your response. As i know, ESET Inspect XDR requirement clients installed endpoint ( ESET endpoint) and use that to block application/file by HASH. So i've had question why not block application/file by HASH (instead of name application) on the endpoint ?

Hi everyone, Have you been ever block appcation by HIPS rule via hash (MD5 ,SHA1, SHA-256) ? As far as i know i've just blocked application by Application name ( with a specific path )

Hi Marcos, It mean that my customers have to install version 9.1.2063 before 7th December to continue using Eset endpoint on their machine win 7 ?

Hi everyone, In my case, on dashboard detectetion, have some detections was not ACTION , what is mean for these ? Anybody could suggest for this iusse ?

Hi Marcos. Did you meet this issue before ? Still now , sometimes it not work smoothly as i expected and i don't know the root cause to resolved it . ( just wait or try restarting services or server many times to expect it to work)

It occured the error below : It