[Kaspersky products and Solarwinds hack]

Hi,

this is a first answer: https://securelist.com/sunburst-connecting-the-dots-in-the-dns-requests/99862/

M

[KES11.2 critical fix 1]

Hi,

Download: http://aes.kaspersky-labs.com/endpoints/keswin11/11.2.0.2254/english-int-cf1.en.20191231.4204619/3237373732347c44454c7c31/keswin_11.2.0.2254_en_aes256.exe

I understand that it includes all private patches, etc.. but at the moment I don´t have more information.

Regards

Hi,

you’re right: if you unpack the above mentioned executable you may find that fix...kes11.2.0.cf1.msp 

M

[Download update to repository: RUNNING but Nothing]

Hi,

try to:
1) verify that Patch B has been applied to KSC Server
2) stop the update task and verify that you do not have any up2date.exe process up and running anymore
If the previous steps were not enough:
3) try to clear updates repository
4) delete the update task and create a new one with default settings

M

 

[how can remove the license key from kaspersky endpoint security from command line?]

Hi,

try this: AVP.COM LICENSE /DEL /login=login /password=password

M

 

i test that and result is:

 

Command line:

"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security for Windows\avp.com" license /del /login=KLAdmin /password=GG

 

result:

Error: Cannot delete product`s reserved  license: command is unavailable due to password protection disabled (err 0x80000066)

 

what is problem?

are you sure you’ve password protected your KES installation? Is the related black lock closed up within KES policy?

M

[how can remove the license key from kaspersky endpoint security from command line?]

Hi,

try this: AVP.COM LICENSE /DEL /login=login /password=password

M

[Kaspersky Agent removes License [MOVED]]

Hi,

first of all you have to upgrade your NA since KES11 can be managed from KSC10 SP3 (10.5) and later versions (https://support.kaspersky.com/14307#block2).
Secondly, verify if you had run out of licenses...;)

M

[How to allow ports in Kaspersky security 10.1.2 for windows server]

Hi,

KS for Win Server does not host any own firewall module but, instead, it provides a Windows firewall management interface only.

M

[Error during update from kes 11.1 to 11.2 [moved]]

Hi,

i think that this problem is due to the fact that seamless upgrade to 11.2 has been withdrawn by K and then it’s not available anymore within the klshare folder. Maybe you have approved this upgrade (when it was still available within Software Updates folder) and this “activate” the update task in order to deploy the related MSP file...unfortunately, at the same time, this MSP file has been “recalled” by HQ...this is my opinion, of course.

M

[in-house application redirection on browsers]

 

                          
                                                                         
                                 3. uninstalled KEs11.2.0.2254 from
client system & checked that same still issue is persists.              

Hello,

but if you remove KES and the problem still persists it’s not a matter of KES, isn’t it?

M

[KES 11.2.0.22]

Hi,

unfortunately you cannot whitelist URLs based on IP (i’m talking about trusted domain area).
You can try to add browser’s exe to the trusted applications area and tick the “do not scan network activity” checkbox and, finally, specify your vSphere URL.

M

[Network Agent keeps changing Admin Server automatically]

Hi, you probably add one or more connection profiles to your Net Agent policy (Connectivity>Connection profiles). These profiles are triggered\managed by some custom "switch conditions". M

[Kaspersky Endpoint Security Cloud Plus Bitlocker Recovery Key [MOVED]]

Hello, as far as i know you cannot recover that key by yourself, at least in the current version of the product: you should ask support to KL via Remedy ticket (https://companyaccount.kaspersky.com/). M

[Launch Kavremover from KSC]

Hi, as far as i know, Remover does not allow an unattended execution despite to the parameter you're working with: it always requires the user's interaction. If you should remove a corporate application you can rely on the KSC uninstallation task... M

Hi, Sure I know it but to solve a particular issue that I'm facing (conflict between KES and sound drivers) the only way is to perform the removal with Kavremover so I'm wondering if I can remotely do that.

RDP (maybe via KSC, if possible)+local Remover ;) M

[Launch Kavremover from KSC]

Hi, as far as i know, Remover does not allow an unattended execution despite to the parameter you're working with: it always requires the user's interaction. If you should remove a corporate application you can rely on the KSC uninstallation task... M

[Kaspersky Endpoint Security Cloud Plus - physical & virtual servers using hyper-v]

Hi, 1) yes you can 2) you should install the standalone package (KES+NA) on each computer (virtual server in your case) you want to protect M

and the hyper-v you do not install ? Thanks. Mario

I'm not an expert but since Hyper-V is "only" a Windows Server role based on a virtual\phisical computer, if you want to protect it you can do it (but verify that there are no guidelines avoiding it for some reasons ;) ) M

[Kaspersky Endpoint Security Cloud Plus - physical & virtual servers using hyper-v]

Hi, 1) yes you can 2) you should install the standalone package (KES+NA) on each computer (virtual server in your case) you want to protect M

[Disk full of .srv files]

Yes, you should work with KSC Remote Diagnostic Utility: screenshot attached M

[Disk full of .srv files]

Hi, if you're talking about something similar to this one KES.11.1.0.15919_04.03_16.02_19792.SRV.log (maybe your OS is set to hide file name extensions) then KES11 tracing system is still turned on and keeps on recording its activities: in this case it would be enough to turn it off from Support area within the product GUI. M

[Kaspersky endpoint security advance 11 (Event issue)]

Hi, despite to the DB size you have to check how many events DB is actually handling. By default the max number of stored events is 400K: it's possible that you're out of this limit...in this case you can easily fix the problem by increasing this value from Admin server properties area. M