Jump to content

"Multiple connections with identical Agent ID" Error


Recommended Posts

Hi All,

We have installed ESET EMSC in an AWS VM . The ESET AV and ESET agent is installed in a master image which is Linux VM and the new clones are created dynamically based on load using AWS Autoscale feature. The created clones are shutdown automatically based on requirement. Problem is , as master image connects to the ESET EMSC with an agent id, the clones also connect with the same agent id causing "Multiple connections with identical Agent ID"  Error. I reached out to support and was adviced to run "The Reset Cloned Agent" task on the master image which will blacklist the Agent ID of master VM and when the clones connect with the same Agent ID, it will generate new agent id. I have tried but the issue is not resolved and the same error shows on the new clones. Please help.

Thanks & Regards,

Sekhar Prudhivi

Link to comment
Share on other sites

Hi Marcos,

I have tried , but the Master Image which is based on Linux server. During the chat with Support team, the engineer tried the below steps as per the link (https://support.eset.com/en/kb6911-cloning-computers-in-eset-security-management-center-create-a-new-computer-every-time), but the option to mark the clone VM as Master image was not present.

Thanks & Regards, 

Sekhar Prudhivi

Link to comment
Share on other sites

Will be gratefull if any member from ESET Team can help me through zoom or webex call. It will be great help as we have recently bought the lincense and stuck at this issue.

 

Regards,

Sekhar Prudhivi

Link to comment
Share on other sites

Is it possible to make the cloned vm to add automatically in Dynamic group? So that when the "Reset Cloned Agent" task can trigger when ever a cloned vm is created and added in Dynamic group. Hope this is possible. 

Link to comment
Share on other sites

I have tried that too and the only solution provided is to run Reset Clone agent task. But that is not working as the base image is live and the image gets updated with changes randomly. So everytime you run the "Reset Clone agent" task on base image, it works for some time till the base image is updates with changes . As soon as the changes are made, the clones are generated with the new id which is generated after running the "Reset Clone agent" task. Basically, we are using AWS Autoscale. So looking for help here.

Link to comment
Share on other sites

  • Administrators

I would recommend explaining the scenario to your local ESET support, it's important to have a ticket created. They have a possibility to ask or escalate the case to ESET HQ support who can suggest the best course of action or consult the issue with developers directly. This forum is not meant to be a substitute to customer care but rather a place where people share their knowledge with ESET mods and where also some of ESET developers come in their spare time and try to help.

I'm sure that if developers come around, they will try to answer your question here too.

Link to comment
Share on other sites

  • ESET Staff
6 hours ago, Sekhar Prudhivi said:

I have tried that too and the only solution provided is to run Reset Clone agent task. But that is not working as the base image is live and the image gets updated with changes randomly. So everytime you run the "Reset Clone agent" task on base image, it works for some time till the base image is updates with changes . As soon as the changes are made, the clones are generated with the new id which is generated after running the "Reset Clone agent" task. Basically, we are using AWS Autoscale. So looking for help here.

I would recommend to employ dynamic groups to distinguish "master" from other clones, so that reset agent task is executed only on clones, not on master image. More details can be found in older topic:

Unfortunately there is currently no automatic handling of cloned devices for Linux systems, so I would definitely recommend to open also support ticket and possibly let know your ESET partner regarding this requirement.

Link to comment
Share on other sites

13 hours ago, MartinK said:

I would recommend to employ dynamic groups to distinguish "master" from other clones, so that reset agent task is executed only on clones, not on master image. More details can be found in older topic:

Unfortunately there is currently no automatic handling of cloned devices for Linux systems, so I would definitely recommend to open also support ticket and possibly let know your ESET partner regarding this requirement.

Hi Martin, 

Thanks for suggesting. I will try this suggestion. Can you guide me how to create the required dynamic template and assign it to the dynamic group please.

 

Thanks & Regards,

Sekhar Prudivi

Link to comment
Share on other sites

Hi Martin,

I am trying to create a dynamic template based on mac id. So that any clone vm which doesnt have the mac id mentioned should add in the dynamic group.

image.thumb.png.65f90527dd74c2e65d8cace7612771d4.png

 

It shows the below message in the yello exclamation mark.

image.thumb.png.be97ee29ff19eb91b12b08de771e7ccb.png

 

Also how can I add more mac-id's of other base images in the same rule? 

 

Thanks & Regards,

Sekhar Prudhivi

 

Edited by Sekhar Prudhivi
Link to comment
Share on other sites

  • ESET Staff

If my understanding is correct, dynamic group should be matching clones and not master image. In case image has permanent and unique MAC address or other identifier, dynamic group might in negate form, i.e. something like: NAND MAC equals "<MAC ADDRESS OF MASTER IMAGE".

Link to comment
Share on other sites

11 hours ago, MartinK said:

If my understanding is correct, dynamic group should be matching clones and not master image. In case image has permanent and unique MAC address or other identifier, dynamic group might in negate form, i.e. something like: NAND MAC equals "<MAC ADDRESS OF MASTER IMAGE".

Hi Martin,

In our senario, the MAC id is unique and not same for base image and clones. As suggested by you in another form.

image.png.031bea41a68f966cabf3b9af6d426683.png

I created the condition based on the third point , where the mac-id is different for base image and clone and tried to use it as condition to never match.

Can you provide any other suggestion please.

 

Thanks & Regards,

Sekhar Prudhivi

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...