i saw realse notes but there is no info how to upgrade cluster, i think there shoudl be a way to do it without downtime,   how about disabling stanby from cluster, upgrade, enabling cluster and upgrade other one? somebody try that? ... View more

the problem is i dont have any free devices ..so maybe someone ..before jtag ... View more

when a/p is configured i can ping vip ip address from internal i can't ping natted ip because only https is permited i can catch traffic to see hits ... View more

yes when nat is configured for 10.10.1.100 - i can access external ip address and log in. ... View more

nope am still looking for way to configure it in the way that first user will need to provide username and pwd and then host checker will check pc ... View more

hi, i can't find it under USER ROLES->(ROLE)->GENERAL->RESTRICTIONS->HOSTCHECKER what is the name of this option? ... View more

Hi, sorry for that so i set it up according your box but still same issue i was using 2 ive soft version and 3 host checkers and same here In attchament you can find my settings am i missing something ? in roles Allow users whose workstations meet the requirements specified by these Host Checker policies: police seleceted and in relam Evaluate Policies Require and Enforce ... View more

hi, System Version 7.1R4.1 (build 19525) how your rule looks like? mine: The following check is supported by these Antivirus products. For any other products, this check will be ignored. Successful System Scan must have been performed in the last: days. Consider this rule as passed if 'Full System Scan' was started successfully as remediation. The following check is supported by these Antivirus products. For any other products, this check will be ignored. For this check to be effective, enable the 'Auto-update virus signatures list' option or manually import the virus signatures list on Endpoint Security page. Virus Definition files should not be older than Updates. Note: The maximum update value entry should be in the range of 1-10 Monitor this rule for change in result ... View more

looks like that for me works only without option ... View more

is it normal that host check is starting before entering username and pwd? ... View more

so i upgraded ESAP FROM 1.6.4 TO 1-7-6 and still McAfee VirusScan Enterprise 8.7.0.570 does not comply with policy. Compliance requires latest virus definition files what settings are you using in Download latest virus definition files, Turn On Real Time Protection ,Start Antivirus Scan checking all? ... View more

Hi with the same version of mcafee? and to which one you updated? let me know what you will figure out ... View more

thanks that works and one more thing about antivirus check i created poclicy to check if host have McAfee but it doesn't work even if i run full scan today am i doing somthing wrong? McAfee VirusScan Enterprise 8.7.0.570 does not comply with policy. Compliance requires successful complete system scan and latest virus definition files. The following check is supported by these Antivirus products. For any other products, this check will be ignored. Successful System Scan must have been performed in the last: days. Consider this rule as passed if 'Full System Scan' was started successfully as remediation. The following check is supported by these Antivirus products. For any other products, this check will be ignored. For this check to be effective, enable the 'Auto-update virus signatures list' option or manually import the virus signatures list on Endpoint Security page. Virus Definition files should not be older than Updates. Note: The maximum update value entry should be in the range of 1-10 Monitor this rule for change in result Note: Enabling this option will report change in compliance for this rule to the IVE immediately Remediation Note: Click on the remediation column headers to see the complete list of products supporting remediation Product Name Download latest virus definition files Turn On Real Time Protection Start Antivirus Scan McAfee VirusScan Enterprise (8.7.x) ... View more

if i will do it like you said i will have to also specify all allowed ips which i dont know Allow or deny users from the following IP addresses: _will block x.x.x. network but will also block the rest ... View more

ok so i don't need vlans at all just a class behind Ive and routing to it clear ... View more

so i can ping from commands interface Vlanx ip address 10.10.10.254 255.255.255.0_ sh ip route 10.10.10.0 Routing entry for 10.10.10.0/24 Known via "connected", distance 0, metric 0 (connected, via interface) Redistributing via eigrp 100 Routing Descriptor Blocks: * directly connected, via VlanX Route metric is 0, traffic share count is 1_ to work i geuss i need static route for 10.10.10.0 with next hop of the IVE ip route 10.10.10.0 255.255.255.0 10.10.11.100 on IVE i have a def route 0.0.0.0 with next ip 10.10.11.254 correct me if i am wrong and thanks ... View more

so 1 hop is 10.200.200.200 i configured vlan ont switch and i can't ping management ip of that vlan split tunneling is disebled and there is no policy how it shoudl be configured? ... View more

make sens thanks:) ... View more

so there is a solution first of all add all network which you want to deny and then 0.0.0.0 0.0.0.0 allow in users restrictions ... View more