Firewall will not start after upgrade to ESET Server Security 11.0.12008 for Microsoft Windows Server

[Ronald Schmidt 0]

Hello,

Restarted a server after upgrading to ESET Server Security 11.0.12008.
Both server and ESET Protect report that the firewall is disabled and recommend rebooting the server.
After multiple reboots I thought I would ask for advice to resolve.

Attached is diag logs of the server from ESET Protect.

Thanks
RS

7548cd9b-a7d2-4f33-b297-88ba80171955_era-diagnostic-logs_2024-02-29_10-56-24.zip

[Marcos 5,074]

There are no errors logged. Please carry on as follows:

1. Enable advanced network protection logging under Tools -> Diagnostics in the advanced setup
2. Restart the server to reproduce the issue
3. Stop logging
4. Collect logs with ESET Log Collector and upload the generated archive here.

Also provide a screenshot of the error.

[Wesley - ITIS 0]

Hi, 

Same issue over here. ESET Protect On-Prem with the new ESET Server Security 11.0.12008.0.
In the Baseline policy the application status for the new firewall module unchecked for 'Show' and 'Send'. On both sides (Server + Client) the message is staying red. 

 

Edited March 1 by Wesley - ITIS
Typo

[Marcos 5,074]

The error occurs if you manually check for updates and update to v11 is downloaded and installed after a reboot. The error doesn't occur if you upgrade to v11 via an msi installer which contains the latest version of the Configuration module 2109.2. This module is also downloaded if you switch to the pre-release update channel (a reboot will be required for the firewall to load properly).

On Monday we plan to release a newer version of the Configuration module 2109.2 on the regular update channel.

[john_White24778 0]

On 3/1/2024 at 2:26 PM, Marcos said:

The error occurs if you manually check for updates and update to v11 is downloaded and installed after a reboot. The error doesn't occur if you upgrade to v11 via an msi installer which contains the latest version of the Configuration module 2109.2. This module is also downloaded if you switch to the pre-release update channel (a reboot will be required for the firewall to load properly).

On Monday we plan to release a newer version of the Configuration module 2109.2 on the regular update channel.

We have same problem in many servers ! Why V11 is placed on Automatic Update when it is just released and seem to be not fully tested !

[Marcos 5,074]

1 hour ago, john_White24778 said:

We have same problem in many servers ! Why V11 is placed on Automatic Update when it is just released and seem to be not fully tested !

It was fully tested. Upgrade with the msi installers or via a software install task was ok and the error didn't occur. Only those who clicked Checked for update were upgraded to v11 via uPCU. You can either switch to the pre-release update channel for the next few days or ignore the error and wait for the latest Configuration module 2109.2 to be released next week.

[IgorB 0]

On 3/1/2024 at 11:56 AM, Marcos said:

The error occurs if you manually check for updates and update to v11 is downloaded and installed after a reboot. The error doesn't occur if you upgrade to v11 via an msi installer which contains the latest version of the Configuration module 2109.2.

I have the same issue, updated a non critical server but I am quite sure I did it trough ESET Protect consolle cloud, not checking updates from the single server.

Please can you give more advice on how to upgrade correctly via ESET protect consolle cloud? I cannot think to manually install server by server in my environment...

[Marcos 5,074]

24 minutes ago, IgorB said:

Please can you give more advice on how to upgrade correctly via ESET protect consolle cloud? I cannot think to manually install server by server in my environment...

I'd recommend using the auto-update feature. If you want to upgrade ESET Server Security with a longer delay after release, you can create an auto-update policy and specify the maximum version that the product can upgrade to automatically. By editing this policy you will be able to control what version of the ESET product is installed. If you don't specify the maximum version number, the product will upgrade automatically about 2-4 weeks after release.

[kelepe 2]

Hello guys, we do not have Firewall module at all. Tried to install ESS from msi, from Eset Protect, from auto-update still firewall module missing. According to help "The Firewall is available only if you have an active ESET PROTECT Entry Tier subscription and above." We have ESET PROTECT Enterprise subscription. Are we missing something??? We are working in offline environment (offline mirror, offline license etc..).

Edited March 5 by kelepe

[Marcos 5,074]

1 hour ago, kelepe said:

Hello guys, we do not have Firewall module at all. Tried to install ESS from msi, from Eset Protect, from auto-update still firewall module missing. According to help "The Firewall is available only if you have an active ESET PROTECT Entry Tier subscription and above." We have ESET PROTECT Enterprise subscription. Are we missing something??? We are working in offline environment (offline mirror, offline license etc..).

When creating an offline license file for ESET Server Security, make sure to select the second one in the list which is for the version with firewall (likely the name will amended to avoid confusion):

[kelepe 2]

Try to regenerate Offline licence - NO PROBLEM. Try to apply license to ESS product - "Activation FAILED License and Product do not match"... Try to applu license with "old" license file for ESS - NO PROBLEM...

[kelepe 2]

Tried to update installer as well with new license = the one with FW but no luck. Something is wrong.

Edited March 5 by kelepe

[john_White24778 0]

Many Isolated Servers are activated with legacy Offline License and they did not need firewall module to be activated.

these servers will upgrade automatically with offline repository, Is there any issue for these servers ?

 

[Marcos 5,074]

30 minutes ago, john_White24778 said:

Many Isolated Servers are activated with legacy Offline License and they did not need firewall module to be activated.

these servers will upgrade automatically with offline repository, Is there any issue for these servers ?

 

If you don't plan to use the firewall in ESET Server Security, you can continue to use the existing offline license key.

[kelepe 2]

Marcos is right. We want to use FW module on new ESS version 11.xxxx . We have been waiting for a while for this feature in ESS product. The current offline license do not cover ESS FW module. We generate new ONE as Marco advised, but it was not accepted with ESS v. 11.xxx with "Activation FAILED License and Product do not match."

Edited March 5 by kelepe