Popeye

Activity Highlights

11 Discussions started
25 Comments posted
9 Points earned
1 Solutions given

Popeye

About

Username
Popeye
Joined
Visits
0
Last Active
Roles
MyAccount
Points
9
Posts
36

Comments

  • Just to confirm your discoveries and the Telia Abuse Team message: I have seen plenty of the same "High TCP Ports" warning from F-Secure Client Security on Windows clients who download files using BitTorrent. Seems like F-Secure has an issue with certain P2P protocols. Haven't seen the warning in relation to media…
  • It appears that you need to add "DO?? XL?? PP??" to include the newer Office document formats. Personally. I have added these for my manual scan, but not for the real time scanning. Scanning PST files is not really very useful, as F-Secure can't (at least couldn't the last time I checked) disinfect single mail object…
  • Have any of you tried to reinstall the Cisco AnyConnect VPN client after the F-Secure upgrade? We saw this problem ourselves a few years back, and traced the problem to a firewall conflict, as both F-Secure and the AnyConnect client has an integrated firewall. If there is an active policy on the Cisco VPN Concentrator /…
  • Solution found: After talking to the tech responsible for the server, I was allowed RDP access and had a look around on the server. Turns out that the installed version of VMWare-Tools was outdated and that Windows Update had not been run in almost 6 months. By upgrading VMWare-Tools and running Microsoft Update in…
  • I have to agree with etomcat (Tamas Feher) on this one. This is such a big bug that a revocation and new version is in place. Too many users are still using Windows XP, and many of these will blindly download and install v10.00 and then discover the problems only after installing the product. They end up with a "crippled"…
  • The link is a link to Graham Tatham's personal homepage where Putty has always resided. It may look suspicious. but it has always been that exact address and it has not been blocked before now. One thing I noticed is that it is only the URL containing putty.exe that is blocked. If I try puttytel.exe or pageant.exe I get…
  • Correction to my previous post: It appears that I was fooled by Browser Protection whitelisting the URL after I first confirmed that I wanted to visit the download URL. Visiting the URL http://the.earth.li/~sgtatham/putty/latest/x86/ is OK, but if I click on "putty.exe" to download, the Browser Protections still screams as…
  • Hi there. It appears that the Browser Protection only blocks the download link when it includes the file name. This URL is blocked: http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe while this URL http://the.earth.li/~sgtatham/putty/latest/x86/ is not blocked. When you visit the URL without the file name, you can…
  • The Client Security hosts are running 9.11 or 9.20. We replace computers every three years, so many computers have a 2-3 year old F-Secure base install that has been upgraded several times. A lot of them started on 8.00 or 8.01 and are now on 9.11 or 9.20 (via 9.00 or 9.01). All computers that startet with a pre 9.11…
  • Thanks for the info, MJ. That wasn't a very intuitive place to put such a (to me at least) useful feature. It deserves a spot on the Operations tab in Anti-virus mode. Plus, it wasn't the most intuitive or well documentet feature I have seen. Can't find it mentioned in the PMC admin guide. And some feedback from the GUI…
  • We're one of those dinosaur companies that still use Lotus Domino/Notes, so we are not affected. Domino/Notes communicate on TCP/1352 with encryption, so F-Secure is blissfully unaware of what's going on.
  • Problem with reboot options in 9.20? I haven't noticed this myself, and have had no reports of this from my users, and I currently have well over 500 PCs running 9.20. BTW, I distribute the push installations including a rather strict, selfmade policy set, so it doesn't matter if it takes several minutes for the computer…
  • So far, I have kept the old policy hierarchy just because it works. A major restructuring job is due, but not until sometime next year. I wantet to get some time with PM10 before I did anything, to avoid doing things the wrong way. I also have two F-Secure deputies that get confused if I change things too often (meaning if…
  • The reason for the design of our policy hierarchi is historical. To put it short (hopefully) and exemplified: * We separate Client Security, Antivirus for Workstations and Antivirus for Windows Servers into separate top level policy domains (scond level domains, actually, under the F-Secure top domain). * Within each…
  • It works perfectly now. Thanks!
  • I get the same error message - "Cannot import, invalid jar file". I also have two separate PMs, both report the error. I even tried to download using two different browsers (FF 8.0 og IE 8.0) to eliminate any browser specific download problems. PM version: 10.00.36754 Win version: WinSrv 2008R2 Standard, 64 bit FSAV…
  • Add the file extension .NSF to the list of excluded file types. That stops the real-time scanner from constantly scanning the Notes databases. Edit: To explain: The Notes client accesses it's .NSF files constantly (the mail database, the address book, the bookmarks, all other open Notes applications), so excluding the .NSF…
  • I have the same problem. I have to log in every time I visit the forum. My browsers (Firefox 6.0.2 and IE 8) do not ask me if I want to remember my login credentials. This make me suspect that the login form somehow is not a "regular" or "plain" login form that the browsers recognises. Is there a way to make the browsers…
  • @MJ-perComp wrote: some thoughts for you: Finding PMS: define a DNS-entry in each network e.g. FSPMS.network-1.no. pointing to the local PMS in Network1. Then export an installation pack that points to "FSPMS" or "FSMPS:hostport" (do not use the full DNS-name) the machine will automatically expand FSPMS to…
  • Here's what I'm trying to do... I'm a sysadmin and security manager at a 20000+ student business school. We are located at six different locations in Norway, and the smaller locations have no dedicated IT staff. They rely on a few trusted students that dump centrally made PC images (Ghost) onto computer lab computers more…
  • Thanks a lot for your reply! I'll talk to one of the desktop admins and have him run some tests to see what they prefer. Since this is a problem that reoccurs every now and then, it would be nice to get a solution that the desktop admins are comfortable with.
  • Am I misunderstanding something, or are you trying to migrate/copy the policy hierarchy? That can be done during/after installing the new policy manager server (PMS). If you upgrade the PMS on the same server, you will be asked if you want to upgrade the current installaton. If you are performing a fresh install on a new…
  • Thank you for the replies so far. I probably should have been more clear in my first post. We see the SysModAttempt warnings when installing commercial software, not just self made software. Here are three screenshots from three different programs: Capture One - A RAW image converter / image editing software Novell Client…
  • Thanks a lot! That was spot on! 
  • Thank you. I added one more CPU, and the server is running smooth as silk now. The reason for running the PMC on the server itself is that the previous versions of the PMC were lagging over the network. Running it on the server itself removed the lagging. PMC on the server also removed the need to distribute certificates…