To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Push installation button in FSPM 12 doesn’t work

Hamp1983
Hamp1983 Posts: 4 Security Scout
in Business Suite

Hi,

The push installation button in FSPM 12 doesn’t work.

When I push I nothing happens.

I can access all the other features in FSPM without any problems.

Can it be a windows security settings problem?

Is there a proper log to pin down this problem?

 

Thanks in advance!

Comments

  • etomcat
    etomcat Posts: 1,172 Firewall Master

    Hello,

     

    I don't recommend the legacy "Push Install" feature, since it has a several pre-conditions for success on the client end, which are somewhat difficult to meet ever since Microsoft strenghtened Windows' built-in security in Vista and newer.

     

    Alternatively, you could import the web downloaded endpoint .JAR package into F-Secure Policy Manager Console and re-export it in .MSI format. Place the pre-configured .MSI file into a GPO (Active Directory Group Policy Object) and that will do the installation on endpoints for you, without the need to "castrate" Windows' own security beforehand.

     

    Best Regards: Tamas Feher, Hungary.

  • Hamp1983
    Hamp1983 Posts: 4 Security Scout

    Hi etmocat,

     

    Yes, that´s one solution for the distribution problem. and i will concider it :)

    But i would really like to understand why the legacy "push intallation" feature doesn´t work.

    And this because i suspect that there are some other problems with FSPM lurking around.

    But I need to start with some symptome and I chosed this one.

    I suspect that it might be a security issue on the server side du to a update.

    But i´m not sure. :)

     

     

    Question:

    Are there any specific or "propper" logs to see why the "Push installation" butten doesn´t work?

     

    Regards!

  • etomcat
    etomcat Posts: 1,172 Firewall Master

    Hello,

     

    Check these:

     

    - Endpoint firewall (e.g. built-in Microsoft FW) doesn't block the network ports used for push install (135/137/139 I think)

     

    - Admindollar share works on the endpoint

     

    - Remote registry access service is enabled and runs on the endpoint

     

    - You may need to set a registry key on some Windows 78 versions for Push Install to work

    ( LocalAccountTokenFilterPolicy=dword:00000001 at

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System )

     

    - Since one may need a GPO to adjust these pre-conditions on the many endpoints at once, it could be easier to distribute FSAVCS directly in MSI + GPO and forget about the above laundry list. FSPM version 12.21 now has improved MSI support.

     

    Best Regards: Tamas Feher, Hungary.

  • dandelion
    dandelion Posts: 31 Junior Protector

    Hello, 

     

    It's not clear from your description what exactly doesn't work. When you click the 'Push installation' button, does the 'Push installation wizard' show up? 

  • Hamp1983
    Hamp1983 Posts: 4 Security Scout

    Hi dandelion,

     

    Sorry for my unclearness :)

    But your assumption is correct. The wizard for “push installation” will not start.

    Also I noticed that I can’t access the “Installation package dialog”

    The following box shows up when I hit the “Installation packages” button.

    “Cannot show installation package dialog. Try again or see the log for details”

     

    Regards!

     

  • dandelion
    dandelion Posts: 31 Junior Protector

    Hi,

     

    it's hard to tell what the problem is without the additional information. I suggest you contact the technical support. The diagnostic pacckage (aka fsdiag) may be necessary to proceed. Please contact F-Secure support for the instructions. 

     

  • MJ-perComp
    MJ-perComp Posts: 669 Firewall Master

    As noone did before, may I ask what version and platform you are using for PMS and PMC?

    A linux based PMC is not able to do a push at all!

  • Hamp1983
    Hamp1983 Posts: 4 Security Scout

    Hi!

    The platform is a SBS 2011

    Regrds!

This discussion has been closed.

Categories