Sekhar Prudhivi 0 Posted December 6, 2020 Posted December 6, 2020 Hi All, We have installed ESET EMSC in an AWS VM . The ESET AV and ESET agent is installed in a master image which is Linux VM and the new clones are created dynamically based on load using AWS Autoscale feature. The created clones are shutdown automatically based on requirement. Problem is , as master image connects to the ESET EMSC with an agent id, the clones also connect with the same agent id causing "Multiple connections with identical Agent ID" Error. I reached out to support and was adviced to run "The Reset Cloned Agent" task on the master image which will blacklist the Agent ID of master VM and when the clones connect with the same Agent ID, it will generate new agent id. I have tried but the issue is not resolved and the same error shows on the new clones. Please help. Thanks & Regards, Sekhar Prudhivi
Administrators Marcos 5,468 Posted December 6, 2020 Administrators Posted December 6, 2020 Just to make sure, did you follow these instructions to clone computers? https://help.eset.com/esmc_admin/72/en-US/support_vdi.html https://support.eset.com/en/kb6911
Sekhar Prudhivi 0 Posted December 6, 2020 Author Posted December 6, 2020 Hi Marcos, I have tried , but the Master Image which is based on Linux server. During the chat with Support team, the engineer tried the below steps as per the link (https://support.eset.com/en/kb6911-cloning-computers-in-eset-security-management-center-create-a-new-computer-every-time), but the option to mark the clone VM as Master image was not present. Thanks & Regards, Sekhar Prudhivi
Sekhar Prudhivi 0 Posted December 6, 2020 Author Posted December 6, 2020 Will be gratefull if any member from ESET Team can help me through zoom or webex call. It will be great help as we have recently bought the lincense and stuck at this issue. Regards, Sekhar Prudhivi
Sekhar Prudhivi 0 Posted December 7, 2020 Author Posted December 7, 2020 Is it possible to make the cloned vm to add automatically in Dynamic group? So that when the "Reset Cloned Agent" task can trigger when ever a cloned vm is created and added in Dynamic group. Hope this is possible.
Sekhar Prudhivi 0 Posted December 8, 2020 Author Posted December 8, 2020 Is there no one who have encountered this issue before? This issue is really killing me.
Sekhar Prudhivi 0 Posted December 9, 2020 Author Posted December 9, 2020 Can any ESET technician can help me on this issue please?
Sekhar Prudhivi 0 Posted December 9, 2020 Author Posted December 9, 2020 Trying since 4 days, but no help. Can anyone from ESET Staff help me please?
LesRMed 26 Posted December 9, 2020 Posted December 9, 2020 You probably need to contact your local Eset support.
Sekhar Prudhivi 0 Posted December 9, 2020 Author Posted December 9, 2020 I have tried that too and the only solution provided is to run Reset Clone agent task. But that is not working as the base image is live and the image gets updated with changes randomly. So everytime you run the "Reset Clone agent" task on base image, it works for some time till the base image is updates with changes . As soon as the changes are made, the clones are generated with the new id which is generated after running the "Reset Clone agent" task. Basically, we are using AWS Autoscale. So looking for help here.
Administrators Marcos 5,468 Posted December 9, 2020 Administrators Posted December 9, 2020 I would recommend explaining the scenario to your local ESET support, it's important to have a ticket created. They have a possibility to ask or escalate the case to ESET HQ support who can suggest the best course of action or consult the issue with developers directly. This forum is not meant to be a substitute to customer care but rather a place where people share their knowledge with ESET mods and where also some of ESET developers come in their spare time and try to help. I'm sure that if developers come around, they will try to answer your question here too.
ESET Staff MartinK 384 Posted December 9, 2020 ESET Staff Posted December 9, 2020 6 hours ago, Sekhar Prudhivi said: I have tried that too and the only solution provided is to run Reset Clone agent task. But that is not working as the base image is live and the image gets updated with changes randomly. So everytime you run the "Reset Clone agent" task on base image, it works for some time till the base image is updates with changes . As soon as the changes are made, the clones are generated with the new id which is generated after running the "Reset Clone agent" task. Basically, we are using AWS Autoscale. So looking for help here. I would recommend to employ dynamic groups to distinguish "master" from other clones, so that reset agent task is executed only on clones, not on master image. More details can be found in older topic: Unfortunately there is currently no automatic handling of cloned devices for Linux systems, so I would definitely recommend to open also support ticket and possibly let know your ESET partner regarding this requirement.
Sekhar Prudhivi 0 Posted December 10, 2020 Author Posted December 10, 2020 13 hours ago, MartinK said: I would recommend to employ dynamic groups to distinguish "master" from other clones, so that reset agent task is executed only on clones, not on master image. More details can be found in older topic: Unfortunately there is currently no automatic handling of cloned devices for Linux systems, so I would definitely recommend to open also support ticket and possibly let know your ESET partner regarding this requirement. Hi Martin, Thanks for suggesting. I will try this suggestion. Can you guide me how to create the required dynamic template and assign it to the dynamic group please. Thanks & Regards, Sekhar Prudivi
Sekhar Prudhivi 0 Posted December 15, 2020 Author Posted December 15, 2020 (edited) Hi Martin, I am trying to create a dynamic template based on mac id. So that any clone vm which doesnt have the mac id mentioned should add in the dynamic group. It shows the below message in the yello exclamation mark. Also how can I add more mac-id's of other base images in the same rule? Thanks & Regards, Sekhar Prudhivi Edited December 15, 2020 by Sekhar Prudhivi
ESET Staff MartinK 384 Posted December 15, 2020 ESET Staff Posted December 15, 2020 If my understanding is correct, dynamic group should be matching clones and not master image. In case image has permanent and unique MAC address or other identifier, dynamic group might in negate form, i.e. something like: NAND MAC equals "<MAC ADDRESS OF MASTER IMAGE".
Sekhar Prudhivi 0 Posted December 16, 2020 Author Posted December 16, 2020 11 hours ago, MartinK said: If my understanding is correct, dynamic group should be matching clones and not master image. In case image has permanent and unique MAC address or other identifier, dynamic group might in negate form, i.e. something like: NAND MAC equals "<MAC ADDRESS OF MASTER IMAGE". Hi Martin, In our senario, the MAC id is unique and not same for base image and clones. As suggested by you in another form. I created the condition based on the third point , where the mac-id is different for base image and clone and tried to use it as condition to never match. Can you provide any other suggestion please. Thanks & Regards, Sekhar Prudhivi
Recommended Posts