Jump to content

GLFI1969

Members
  • Content Count

    148
  • Joined

  • Last visited

Everything posted by GLFI1969

  1. I opened a support ticket: INC000010307944
  2. with this rule added to the default rule: TDR does not connect. Just add a policy that blocks something and TDR stops connecting. Web Control on with default rule: TDR connects.
  3. I already did. When i insert a rule in Web Control, in addition to the default one, even the blocking of a single site, the TDR no longer connects.
  4. No. This morning i deleted again the DB repository on KSC but nothing: task ends with the same error. The issue with the mobile started exactly on the day of the upgrade from KSC 10 to 11.
  5. hello, i have a connection issue on PCs with KES11.1 installed and WatchGuard TDR agent. The cause is the scan of the encrypted connections option. If i disable this feature or Web Controll, the TDR agent connects after a few seconds. I have checked all the exclusions suggested by WatchGuard and I have inserted in the Trusted Domains and Web Control exceptions everything possible but without results. i have tried also adding the IP addresses as you can see in the logs but nothing. i can not see any block event in the device events on KSC. With these event options, shoud i see site or connections blocke by Web Control? Here some TDR logs: 2019-03-25 11:41:31.703 [Error] [thread:4560] [Communications] Failed to connect to Controller 52.29.89.76:443 - SSL connection unexpectedly closed 2019-03-25 11:41:31.721 [Error] [thread:4560] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:42:06.196 [Error] [thread:4528] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:42:06.220 [Error] [thread:4528] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:42:35.892 [Error] [thread:4544] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:42:35.919 [Error] [thread:4544] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:43:10.511 [Error] [thread:4556] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:43:10.533 [Error] [thread:4556] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:43:46.808 [Error] [thread:4268] [PEUtilities] CryptQueryObject failed with 2148081673 2019-03-25 11:43:46.809 [Error] [thread:4316] [PEUtilities] CryptQueryObject failed with 2148081673 2019-03-25 11:43:46.882 [Information] [thread:4268] [ProcessEventListener] Process created: pid=11072 name=SearchFilterHost.exe image=c:\Windows\System32\searchfilterhost.exe fallback=N 2019-03-25 11:43:46.951 [Information] [thread:4316] [ProcessEventListener] Process created: pid=5596 name=SearchProtocolHost.exe image=c:\Windows\System32\searchprotocolhost.exe fallback=N 2019-03-25 11:43:48.628 [Error] [thread:4556] [Communications] Failed to connect to Controller 18.197.116.222:443 - SSL connection unexpectedly closed 2019-03-25 11:43:48.638 [Error] [thread:4556] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:44:22.825 [Error] [thread:4592] [Communications] Failed to connect to Controller 52.29.89.76:443 - SSL connection unexpectedly closed 2019-03-25 11:44:22.847 [Error] [thread:4592] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:44:57.538 [Error] [thread:4548] [Communications] Failed to connect to Controller 52.29.89.76:443 - SSL connection unexpectedly closed 2019-03-25 11:44:57.561 [Error] [thread:4548] [Communications] Failed to connect to any Controller in known list 2019-03-25 11:45:08.419 [Information] [thread:4444] [ProcessEventListener] Process created: pid=6164 name=backgroundTaskHost.exe image=c:\Windows\System32\backgroundtaskhost.exe fallback=N 2019-03-25 11:45:08.436 [Error] [thread:4508] [BehaviorPreventorProcessEvents] OpenProcess failed for getUserNameForProcess, pid: 1880code: 5 2019-03-25 11:45:08.439 [Information] [thread:4480] [ProcessEventListener] Process created: pid=1880 name=svchost.exe image=C:\Windows\System32\svchost.exe fallback=Y 2019-03-25 11:45:08.530 [Information] [thread:4308] [ProcessEventListener] Process created: pid=12084 name=RuntimeBroker.exe image=c:\Windows\System32\runtimebroker.exe fallback=N 2019-03-25 11:45:14.410 [Information] [thread:4292] [ProcessEventListener] Process created: pid=12136 name=svchost.exe image=c:\Windows\System32\svchost.exe fallback=N 2019-03-25 11:45:20.999 [Error] [thread:4488] [PEUtilities] CryptQueryObject failed with 2148081673
  6. unfortunately the deletion of the repository did not solve the problem! On tablet: error 5. I'm going to open a support request....
  7. I still have to make further checks but it seems to me that on two PCs where i upgraded to KES 11.1 manually the problem did not occur.
  8. Hello Nikolay, it was the first thing i did. However, i will try again on Monday. this is the error: Tipo evento: Errore durante la verifica dei database e dei moduli dell'applicazione Risultato: I file di aggiornamento sono danneggiati Oggetto: updates/uds/unmod-uds-1313g.xml Oggetto\Percorso: updates/uds/ Oggetto\Nome: unmod-uds-1313g.xml Utente: NT AUTHORITY\SYSTEM (Utente di sistema) Data rilascio: 22/03/2019 17:28:00 For now, i have created a task that update clients via Internet every 3 hours because this task ends without errors. Meanwhile, this afternoon i discovered that even the tablets didn't update exactly from the day i updated to KSC11. Supposing that the problem was still the repository, i set the mobile devices policy, the update using Internet with Kaspersky Lab Servers and for now it works.
  9. Salve, sono agli inizi con la KSC Web Console e sono già nevrotico! Perchè non riesco a selezionare i pc da aggiungere ad un task? L'interfaccia mi visualizza i gruppi ma non i pc al loro interno. Io ho cercato un po' nell'help on-line di Kaspersky ma dopo mezz'ora non ne potevo più, quindi eccomi qua. Ok, sicuramente farò una figuraccia ma ecco la prima immagine. Il checkbox IP address / NetBIOS / DNS name non riesco a selezionarlo. Quindi passo al pulsante ADD dove mi vengono mostrati i gruppi ma non i dispositivi all'interno. Ad ogni modo anche se volessi selezionare tutto il gruppo Scorta premendo il pulsante OK, non succede nulla. Se prendo un task contenente dei pc, li riesco a rimuovere ma il pulsante di salvataggio delle modifiche pendenti non viene visualizzato. Ho aggiunto l'ip del server alle esclusioni del Web Control, alla Protezione minacce Web, ai domini sicuri per HTTPS inspection. ma niente! Sto lavorando con il nuovo KSC 11, KES 11.1 e Network Agent ver 11. Avete un idea del motivo?
  10. Hello HeinrichP67, you're right, i was using the wrong port! I'm sorry for this mistake.
  11. Ivan, have you received my private message? Thanks
  12. Hello, when i try with Firefox i get this: Proxy Authentication Required When i try to connect using https://ServerIp:8061 first i get the invalid certificate warning and after Proxy Authentication Required. The same with http://ServerIp:8060. I don't think it is a closed port issue, otherwise I do not receive the notice for the certificate.
  13. Hello, tomorrow i wil send you a private link with the GSI. I'm using KSC 11.
  14. Ivan i sent a private message. Thanks
  15. hello, i noticed that unlike the previous upgrade, after updating the network agent to version 11, i have to restart the PCs otherwise i will always receive a corrupt database error after each update task. Tipo evento: Errore durante la verifica dei database e dei moduli dell'applicazione Risultato: I file di aggiornamento sono danneggiati Oggetto: updates/bin/klp-1313g.xml Oggetto\Percorso: updates/bin/ Oggetto\Nome: klp-1313g.xml Utente: Domain\username (Utente attivo) Data rilascio: 19/03/2019 08:26:00 and after the reeboot i notice that at the end of the update task some PCs that have been updated to KES 11.1 have the warning: not all components have been updated. Tipo evento: Errore durante la verifica dei database e dei moduli dell'applicazione Risultato: I file di aggiornamento sono danneggiati Oggetto: updates/uds/unmod-uds-1313g.xml Oggetto\Percorso: updates/uds/ Oggetto\Nome: unmod-uds-1313g.xml Utente: Domain\username (Utente attivo) Data rilascio: 19/03/2019 08:26:00 Tipo evento: Non tutti i componenti sono stati aggiornati Risultato: Non tutti i componenti sono stati aggiornati Utente: Domain\username (Utente attivo) Data rilascio: 19/03/2019 08:26:00
×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.