TomTomTom 2 Posted August 18, 2017 Posted August 18, 2017 (edited) Hi, I started with Server 2016 now. When I installed Filesecurity and Agent after a reboot Web- and Phishing Protection is disabled and there is no way to enable it. Also the Windows Firewall does not start. Has anyone an idea? Thanks Tom Edited August 18, 2017 by TomTomTom
Administrators Marcos 5,466 Posted August 18, 2017 Administrators Posted August 18, 2017 Do you have protocol filtering enabled in the advanced setup?
TomTomTom 2 Posted August 18, 2017 Author Posted August 18, 2017 (edited) I left everything default. Where can I find the switch for protocol filtering? OK, I found it. Disabling and then enabling was the solution. --> crazy Thanks Edited August 18, 2017 by TomTomTom
TomTomTom 2 Posted August 18, 2017 Author Posted August 18, 2017 Sad news: After a reboot everything is back to start: Web- and Phishing Protection is disabled
TomTomTom 2 Posted August 21, 2017 Author Posted August 21, 2017 Any idea? Still the same behavior. I tried to install Filesecurity manual and via ERA. I did a complete new installation of Server 2016. There is still the same problem.
TomTomTom 2 Posted August 21, 2017 Author Posted August 21, 2017 OK, I can delimit the problem a little bit, but can not find a solution yet: The problem still exists in my virtual installation. On a hardware server everything works fine. The virtualisation environment is a PROXMOX server. Any ideas? Is there something special to install/switch off/....? Thanks
TomTomTom 2 Posted August 22, 2017 Author Posted August 22, 2017 ok, solution is found: Very simple -> Took other Windows Virtio Drivers for the virtual machine
Administrators Marcos 5,466 Posted August 22, 2017 Administrators Posted August 22, 2017 Speaking about VirtIO drivers, this is what we have recently found out: It seems that there is a problem when Receive Segment Coalescing (RSC) is enabled on VirtIO Ethernet adapter. Our wfp drivers do not support RSC, which is perfecly fine and Windows should disable RSC on that network adapter. However, for some unknown reason when Windows tries to disable RSC on Virtio, the BFE service hangs (we believe that it could be bug in MS or VirtIO). While we are considering adding RSC support to our drivers, a workaround would be to use different NIC driver or to disable RSC in the network adapter properties, both for IPv4 and IPv6. It can be disabled via the registry as well; search for VirtioAdapter in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\<adapterID> and set RscIPv4 and RscIPv6 to 0, then reboot and install ESET
Recommended Posts