Jump to content

MilanBortel

Members
  • Posts

    128
  • Joined

  • Last visited

Posts posted by MilanBortel

  1. We did some in place upgrades from Windows Server 2012R2 to Windows Server 2019 which worked very well.

    But KSC12 show the operating system type as Windows Server 2016 and not Windows Server 2019 now even after a week.
    How can we have the correct version?

     

    Hello @0xDEADC0DE,
    how about running Inventory task on the host? It might refresh info about installed apps and also OS ..

    #justguessing

     

    Cheers,
    Milan

  2. HI. I see. thanks

    Hello Bob,

    I think you can solve this with combo - Device Control + Disk Encryption:

    1. disable all Removable Drives..
    2. allow trusted device by ID (that would make it read/write of course)..
    3. but then - apply Encryption for entire removable drive:
    1. When a user connects untrusted USB it would be blocked.. when user connects trusted device it will be by default READ only and in case user wants to write on the disk - it encrypts the entire drive - thus makes it impossible to read on other device 😎

    Cheers,
    Milan

  3. Hello 

     

    I was upgrade my ksc from 11 to 12 and not running well after that (service kladmin directly stop) and I report with company account, and then I received fixing file but when I run cannot success 

    Below for details: 

     

    C:\WINDOWS\system32>klsql2.exe -i src.sql -o result.xml
    Checking arguments...OK
    Initializing DCOM...OK
    Initializing basic libraries...OK
    Connecting database server...OKF

    FAILED- Error 1186/0x0 ('The system cannot find the file specified.') occured while opening file 'src.sql'

    Deinitializing basic libraries...OK
    Deinitializing DCOM...OK

    I guess the executable looks for file src.sql within c:\windows\system32 where I believe you don’t have such file .. Try to change the working directory to where the src.sql file is located 🤓

  4. Hello guys,
    I want to use TLS v1.2 only on server with KSC. 

    1. changed settings according to https://help.kaspersky.com/KSC/11/en-US/174316.htm
    2. restarted KSC service, everything is working fine
    3. when I set up the windows server to use only TLS v1.2 https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings
    4. then MMC console won’t connect to KSC server, restarting KSC service doesn’t help, restarting windows server doesn’t help:
      KSC fails to connect

       

    5. only allowing TLS v1.0 from step 3 helps to recover the KSC

    KSC is running on Windows Server 2016 Standard
    SQL is running on Windows Server 2012 R2
    SQL 2016
     

    Thanks for your ideas,
    Milan

  5. Could you please confirm that these hosts are still managable via Network agent and KSC can obtain events ans other data from that hosts?

    At least events “application uninstalled/application installed” for, e.g. Chrome update are being published.

     

    > Is it true, that there is no access for that machines using KSC diagnostic utilities?

    Ehm… how can I do it remotely?

    Right-click on the device in KSC and go Custom tools→ Remote diagnostics

    Remote diagnostics in KSC

     

  6. Multiple (although not all and not even majority of) computers have suddenly, in last couple of days, fallen into the “Security application is not installed” state. KES 11.2.0.2254cf1 is installed on the computers according to “Application registry” but the “Applications” tab shows only Network Agent being installed and running.
    Network agent 11.0.0.1131b is running ok against KSC 10.5.1781.

    The affected machines connect remotely over VPN (the crisis and quarantine, you know) so I cannot even get diagnostics from them.

    WTHIGO? Has anybody encountered anything similar?

    Hi @aehrlich,
    I’ve been facing the same error on one particular machine - and it was after recent Windows Updates (Feature Update → 1903 → 1909) 😡

    I’m afraid that the only thing that helped was a complete reinstall KES + NAgent (using stand-alone installation package). That machine was also connected via VPN to my KSC … after reinstalling, Network Agent finally recognized that there IS a KES installed..from that moment, it’s working now correctly ..

    Cheers,
    Milan

  7. I’d also add to create and schedule regularly “Backup of Administration Server data” task - remember, when installing KSC it automatically generates unique certificate, which is then used for key features (SSL communication with clients, Data Encryption). Without having a backup, you lose the original certificate and you would need to reinstall KSC with all clients! 😈

  8. Hello guys,

    I’m having an issue with logging in the Web console (11.1.144). No matter if I try to log in on the same machine as KSC is installed or from any other, the page displays an error: Information on your page is out of date. Please, refresh page and login again.

     

    Have anyone seen the same issue?

    Milan

     

    PS: yes, we tried reinstalling the web console already 😜

×
×
  • Create New...