Workstations showing up as unmanaged in Era 6.3 and task timing issue

[AMelein 0]

We've been forced to upgrade from v5 to v6 after the v5 server started failing without any obvious cause or resolution and we decided to treat the deployment like we would when swapping AV providers and start from scratch.

I deployed the VPX, configured policies with the settings we want and set up 2 tasks to run ASAP on the computer groups. 1 being 'Install AV software' and the other for activating it.

 

The deployment went relatively smooth but I'm seeing a series of computers that are showing up as unmanaged.

These computers have no last contact time but when I open the details they have the latest signatures, the correct policies and both the agent and AV software are present.

So everything looks OK but the latest connected time.

I can't really figure out why this is seeing as other identical computers on the same subnet are working fine.

 

A second thing I've noticed which is more an annoyance then an actual problem is that it's trying to activate (and also update) the AV software before the AV software is actually installed. Is there a way to limit these tasks to not run until the actually relevant software is installed so it doesn't log lots of errors all the time ?

[MartinK 378]

The deployment went relatively smooth but I'm seeing a series of computers that are showing up as unmanaged.

These computers have no last contact time but when I open the details they have the latest signatures, the correct policies and both the agent and AV software are present.

So everything looks OK but the latest connected time.

I can't really figure out why this is seeing as other identical computers on the same subnet are working fine.

 

This is known issue in ERA 6.3. Does restarting SERVER (command restart eraserver) or restarting makes any difference?

 

In case restart helps, you may also use fixed libraries for ERA Appliance 6.3.12.0 (only for this) available as attachment. Provided archive contains steps for appliacation.

 

 

Server_Linux_x64_6.3.12.1.zip

[MartinK 378]

A second thing I've noticed which is more an annoyance then an actual problem is that it's trying to activate (and also update) the AV software before the AV software is actually installed. Is there a way to limit these tasks to not run until the actually relevant software is installed so it doesn't log lots of errors all the time ?

 

What type of task are you using to activate product? Software installation of Software activation task? As first one should install security product and activate it after it is installed - this does not work for you?

[AMelein 0]

 

The deployment went relatively smooth but I'm seeing a series of computers that are showing up as unmanaged.

These computers have no last contact time but when I open the details they have the latest signatures, the correct policies and both the agent and AV software are present.

So everything looks OK but the latest connected time.

I can't really figure out why this is seeing as other identical computers on the same subnet are working fine.

 

This is known issue in ERA 6.3. Does restarting SERVER (command restart eraserver) or restarting makes any difference?

 

In case restart helps, you may also use fixed libraries for ERA Appliance 6.3.12.0 (only for this) available as attachment. Provided archive contains steps for appliacation.

 

 

Restart updated all the timestamps. I'll place the hotfix and see how it goes.

 

 

 

A second thing I've noticed which is more an annoyance then an actual problem is that it's trying to activate (and also update) the AV software before the AV software is actually installed. Is there a way to limit these tasks to not run until the actually relevant software is installed so it doesn't log lots of errors all the time ?

 

What type of task are you using to activate product? Software installation of Software activation task? As first one should install security product and activate it after it is installed - this does not work for you?

 

 

There is a software install task that installs the AV, it is set on a 'run ASAP' trigger on the lost and found + windows computer groups.

The activation task is a Product Activation type and is set to the same groups.

I did just notice there was a dynamic group that is supposed to have all the computers that lack activation but I was getting the impression that it wasn't always accurate.

i assigned an activation task to that group earlier today with a */5 cron trigger so time will tell if that worked..

 

If the AV install fails it will occasionally also not try to install the software again, I considered making a dynamic group that has computers in it that report having no antivirus installed but I've seen computers that gave that alert when they boot and Eset 6 just isn't running fully yet. Not sure how to automatically deal with those.

[MartinK 378]

 

 

The deployment went relatively smooth but I'm seeing a series of computers that are showing up as unmanaged.

These computers have no last contact time but when I open the details they have the latest signatures, the correct policies and both the agent and AV software are present.

So everything looks OK but the latest connected time.

I can't really figure out why this is seeing as other identical computers on the same subnet are working fine.

 

This is known issue in ERA 6.3. Does restarting SERVER (command restart eraserver) or restarting makes any difference?

 

In case restart helps, you may also use fixed libraries for ERA Appliance 6.3.12.0 (only for this) available as attachment. Provided archive contains steps for appliacation.

 

 

Restart updated all the timestamps. I'll place the hotfix and see how it goes.

 

 

 

A second thing I've noticed which is more an annoyance then an actual problem is that it's trying to activate (and also update) the AV software before the AV software is actually installed. Is there a way to limit these tasks to not run until the actually relevant software is installed so it doesn't log lots of errors all the time ?

 

What type of task are you using to activate product? Software installation of Software activation task? As first one should install security product and activate it after it is installed - this does not work for you?

 

 

There is a software install task that installs the AV, it is set on a 'run ASAP' trigger on the lost and found + windows computer groups.

The activation task is a Product Activation type and is set to the same groups.

I did just notice there was a dynamic group that is supposed to have all the computers that lack activation but I was getting the impression that it wasn't always accurate.

i assigned an activation task to that group earlier today with a */5 cron trigger so time will tell if that worked..

 

If the AV install fails it will occasionally also not try to install the software again, I considered making a dynamic group that has computers in it that report having no antivirus installed but I've seen computers that gave that alert when they boot and Eset 6 just isn't running fully yet. Not sure how to automatically deal with those.

 

 

Easiest is to use one software installation task for both installation and activation -> it will execute activation after installation successfully ends, and that is probably what you want.

[AMelein 0]

Easiest is to use one software installation task for both installation and activation -> it will execute activation after installation successfully ends, and that is probably what you want.

 

Can you point me in the direction on how to do that ? It doesn't mention activation in the software installation task for me.

[MartinK 378]

 

Easiest is to use one software installation task for both installation and activation -> it will execute activation after installation successfully ends, and that is probably what you want.

 

Can you point me in the direction on how to do that ? It doesn't mention activation in the software installation task for me.

 

 

In task configuration, there is section called "ESET License" and next to it is clickable <Choose ESET License> which will let you choose license to be used to activate installed product.

[AMelein 0]

 

 

Easiest is to use one software installation task for both installation and activation -> it will execute activation after installation successfully ends, and that is probably what you want.

 

Can you point me in the direction on how to do that ? It doesn't mention activation in the software installation task for me.

 

 

In task configuration, there is section called "ESET License" and next to it is clickable <Choose ESET License> which will let you choose license to be used to activate installed product.

 

 

Yes that's what I'm currently using, but it will fire off the activation -before- the AV software is fully installed and then fail.

It would be nice if you could assign multiple tasks in a run order to a single trigger. The current setup seems to be heavily depending on the dynamic groups.

I had the activation trigger on the same group as the software install which is causing the failed activations I believe.

[AMelein 0]

 

The deployment went relatively smooth but I'm seeing a series of computers that are showing up as unmanaged.

These computers have no last contact time but when I open the details they have the latest signatures, the correct policies and both the agent and AV software are present.

So everything looks OK but the latest connected time.

I can't really figure out why this is seeing as other identical computers on the same subnet are working fine.

 

This is known issue in ERA 6.3. Does restarting SERVER (command restart eraserver) or restarting makes any difference?

 

In case restart helps, you may also use fixed libraries for ERA Appliance 6.3.12.0 (only for this) available as attachment. Provided archive contains steps for appliacation.

 

 

just as a heads up for anyone else, the server update task actually overwrites and undoes this hot fix at this time. I had the 'Remote Administrator Components Upgrade' scheduled and all of a sudden the times stopped updating again.