Jump to content

GLFI1969

Members
  • Content Count

    148
  • Joined

  • Last visited

About GLFI1969

  • Rank
    Cadet

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. I opened a support ticket: INC000010307944
  2. with this rule added to the default rule: TDR does not connect. Just add a policy that blocks something and TDR stops connecting. Web Control on with default rule: TDR connects.
  3. I already did. When i insert a rule in Web Control, in addition to the default one, even the blocking of a single site, the TDR no longer connects.
  4. No. This morning i deleted again the DB repository on KSC but nothing: task ends with the same error. The issue with the mobile started exactly on the day of the upgrade from KSC 10 to 11.
  5. hello, i have a connection issue on PCs with KES11.1 installed and WatchGuard TDR agent. The cause is the scan of the encrypted connections option. If i disable this feature or Web Controll, the TDR agent connects after a few seconds. I have checked all the exclusions suggested by WatchGuard and I have inserted in the Trusted Domains and Web Control exceptions everything possible but without results. i have tried also adding the IP addresses as you can see in the logs but nothing. i can not see any block event in the device events on KSC. With these event options, shoud i see site or connections blocke by Web Control? Here some TDR logs: 2019-03-25 11:41:31.703 [Error] [thread:4560] [Communications] Failed to connect to Controller 52.29.89.76:443 - SSL connection unexpectedly closed 2019-03-25 11:41:31.721 [Error] [thread:4560] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:42:06.196 [Error] [thread:4528] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:42:06.220 [Error] [thread:4528] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:42:35.892 [Error] [thread:4544] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:42:35.919 [Error] [thread:4544] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:43:10.511 [Error] [thread:4556] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:43:10.533 [Error] [thread:4556] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:43:46.808 [Error] [thread:4268] [PEUtilities] CryptQueryObject failed with 2148081673 2019-03-25 11:43:46.809 [Error] [thread:4316] [PEUtilities] CryptQueryObject failed with 2148081673 2019-03-25 11:43:46.882 [Information] [thread:4268] [ProcessEventListener] Process created: pid=11072 name=SearchFilterHost.exe image=c:\Windows\System32\searchfilterhost.exe fallback=N 2019-03-25 11:43:46.951 [Information] [thread:4316] [ProcessEventListener] Process created: pid=5596 name=SearchProtocolHost.exe image=c:\Windows\System32\searchprotocolhost.exe fallback=N 2019-03-25 11:43:48.628 [Error] [thread:4556] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:43:48.638 [Error] [thread:4556] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:44:22.825 [Error] [thread:4592] [Communications] Failed to connect to Controller 52.29.89.76:443 - SSL connection unexpectedly closed 2019-03-25 11:44:22.847 [Error] [thread:4592] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:44:57.538 [Error] [thread:4548] [Communications] Failed to connect to Controller 52.29.89.76:443 - SSL connection unexpectedly closed 2019-03-25 11:44:57.561 [Error] [thread:4548] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:45:08.419 [Information] [thread:4444] [ProcessEventListener] Process created: pid=6164 name=backgroundTaskHost.exe image=c:\Windows\System32\backgroundtaskhost.exe fallback=N 2019-03-25 11:45:08.436 [Error] [thread:4508] [BehaviorPreventorProcessEvents] OpenProcess failed for getUserNameForProcess, pid: 1880code: 5 2019-03-25 11:45:08.439 [Information] [thread:4480] [ProcessEventListener] Process created: pid=1880 name=svchost.exe image=C:\Windows\System32\svchost.exe fallback=Y 2019-03-25 11:45:08.530 [Information] [thread:4308] [ProcessEventListener] Process created: pid=12084 name=RuntimeBroker.exe image=c:\Windows\System32\runtimebroker.exe fallback=N 2019-03-25 11:45:14.410 [Information] [thread:4292] [ProcessEventListener] Process created: pid=12136 name=svchost.exe image=c:\Windows\System32\svchost.exe fallback=N 2019-03-25 11:45:20.999 [Error] [thread:4488] [PEUtilities] CryptQueryObject failed with 2148081673
  6. unfortunately the deletion of the repository did not solve the problem! On tablet: error 5. I'm going to open a support request....
  7. I still have to make further checks but it seems to me that on two PCs where i upgraded to KES 11.1 manually the problem did not occur.
  8. Hello Nikolay, it was the first thing i did. However, i will try again on Monday. this is the error: Tipo evento: Errore durante la verifica dei database e dei moduli dell'applicazione Risultato: I file di aggiornamento sono danneggiati Oggetto: updates/uds/unmod-uds-1313g.xml Oggetto\Percorso: updates/uds/ Oggetto\Nome: unmod-uds-1313g.xml Utente: NT AUTHORITY\SYSTEM (Utente di sistema) Data rilascio: 22/03/2019 17:28:00 For now, i have created a task that update clients via Internet every 3 hours because this task ends without errors. Meanwhile, this afternoon i discovered that even the tablets didn't update exactly from the day i updated to KSC11. Supposing that the problem was still the repository, i set the mobile devices policy, the update using Internet with Kaspersky Lab Servers and for now it works.
  9. Salve, sono agli inizi con la KSC Web Console e sono già nevrotico! Perchè non riesco a selezionare i pc da aggiungere ad un task? L'interfaccia mi visualizza i gruppi ma non i pc al loro interno. Io ho cercato un po' nell'help on-line di Kaspersky ma dopo mezz'ora non ne potevo più, quindi eccomi qua. Ok, sicuramente farò una figuraccia ma ecco la prima immagine. Il checkbox IP address / NetBIOS / DNS name non riesco a selezionarlo. Quindi passo al pulsante ADD dove mi vengono mostrati i gruppi ma non i dispositivi all'interno. Ad ogni modo anche se volessi selezionare tutto il gruppo Scorta premendo il pulsante OK, non succede nulla. Se prendo un task contenente dei pc, li riesco a rimuovere ma il pulsante di salvataggio delle modifiche pendenti non viene visualizzato. Ho aggiunto l'ip del server alle esclusioni del Web Control, alla Protezione minacce Web, ai domini sicuri per HTTPS inspection. ma niente! Sto lavorando con il nuovo KSC 11, KES 11.1 e Network Agent ver 11. Avete un idea del motivo?
×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.