Jump to content

ESET INSPECT Connector Alerts


Recommended Posts

I am getting the following status logs from the computers that ESET SECURITY is installed.

Status Log Image attached.

error1.thumb.png.0bc9419820f2b7d669a1d0e0f187c52d.png

Some of the Error Logs: 

2024-01-19 07:12:29 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::unprotect failed to WriteEncryptedData Peer: ...:... Code: 213 (Unknown CA)

 

2024-01-19 07:12:29 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::protect_flush failed to WriteDecryptedData Peer: ...:... Code: 207
2024-01-19 07:12:44 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::unprotect failed to WriteEncryptedData Peer: ...:... Code: 213 (Unknown CA)
2024-01-19 07:12:44 Error: CNetworkGrpcModule [Thread 3078]: GRPC:Decryption error: TSI_INTERNAL_ERROR
2024-01-19 07:12:44 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::protect_flush failed to WriteDecryptedData Peer: ...:... Code: 207

But in some other clients the Status Log has no errors and these error Logs doesn't appear.

The clients where installed using the same installer. Also some of the clients could not recognize the ESET INSPECT License and I had to manage it manually from the web console of PROTECT.

All certificates were signed by the same CA

On the web console I am getting the error that you can see on the 2nd attached imageScreenshot2024-01-23095926.png.24af57cb109503775e5886ccd08636c7.png

Link to comment
Share on other sites

27 minutes ago, alepetpan said:

I am getting the following status logs from the computers that ESET SECURITY is installed.

Status Log Image attached.

error1.thumb.png.0bc9419820f2b7d669a1d0e0f187c52d.png

Some of the Error Logs: 

2024-01-19 07:12:29 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::unprotect failed to WriteEncryptedData Peer: ...:... Code: 213 (Unknown CA)

 

2024-01-19 07:12:29 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::protect_flush failed to WriteDecryptedData Peer: ...:... Code: 207
2024-01-19 07:12:44 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::unprotect failed to WriteEncryptedData Peer: ...:... Code: 213 (Unknown CA)
2024-01-19 07:12:44 Error: CNetworkGrpcModule [Thread 3078]: GRPC:Decryption error: TSI_INTERNAL_ERROR
2024-01-19 07:12:44 Error: EraGrpc [Thread 3078]: EraGrpc: EraFrameProtector::protect_flush failed to WriteDecryptedData Peer: ...:... Code: 207

But in some other clients the Status Log has no errors and these error Logs doesn't appear.

The clients where installed using the same installer. Also some of the clients could not recognize the ESET INSPECT License and I had to manage it manually from the web console of PROTECT.

All certificates were signed by the same CA

On the web console I am getting the error that you can see on the 2nd attached imageScreenshot2024-01-23095926.png.24af57cb109503775e5886ccd08636c7.png

The error on the web console is present on all the clients that appears on the console.

The clients with the error does not even appear on the console of PROTECT.

Link to comment
Share on other sites

  • Administrators

Do you have a CA certificate with CN "ESET PROTECT Server Test" installed in your ESET PROTECT? Is there also an agent peer certificate installed issued by CA with CN "ESET PROTECT Server Test"  with "yes" in the "CA is present" column next to it?

Link to comment
Share on other sites

We do have a server certificate with Subject "CN=Server certificate for host localhost,...) and the issuer has the "CN=ESET PROTECT Server Test CA" installed on the PROTECT Server. (on the web console Settings>CONNECTION>Certificate)

We also have an agent certificate with Subject "CN=Agent certificate for host *) and the issuer has the same as before  "CN=ESET PROTECT Server Test CA" which was used on the installer for the clients.

Both of them have "CA IS PRESENT" as "Yes"

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...