Yet the 8.1 machines work with no modification to the default policy, while the windows 7 machines require no GPO, and an additional rule applied. What is really bothersome is that my windows 8.1 machines and my problem windows 7 machines (all instances) have the same GPOs. So, it seems the issue lies in my GPO somewhere. At the same time, I want kaspersky to manage the endpoint firewalls. I need to be able to have my computer on AD and use GPO. However these solutions are not good enough for me. (Made new OU, disable inheritance, stuck problem machine in new OU) This is in addition to allowing ICMP rules.
Remove GPOs: I did this through both Essentials Dashboard (uncheck defender, updates and firewall) as well as in the GPO tool. When I add the computer back, it cannot communicate with the local network) 
(this only works if the computer is not a part of the domain.
When we removed the problem computer from the domain and allowed ICMP streams, the machine can communicate just fine. When we turn the firewall plugin off (in kaspersky endpoint 10), the machine can communicate with the local network just fine. We tried adding my subnets to the trusted networks as well as allowing a few other packet rules listed below. Use non KSC installer, then add to policy. BUT the machine cannot serve file shares or respond to ping requests. When I install Kaspersky Endpoint security 10 on my domain windows 7 clients, The application installs fine as well as the network agent. The windows 8.1 machines can talk to other machines (including the win7 machines), serve up file shares to the network, and respond to ping requests. The endpoint security and network agent installs and connected to Kaspersky Security Center just as it should. When installing kaspersky endpoint security 10 on my domain windows 8.1 clients, there are no issues. I use the essentials connector to connect both my windows 7 and windows 8 machines. I am running Windows Server 2012 R2 Datacenter with a Server Essentials R2 2012 role. So here is my situation and a brief summary of the problem at hand: 
That being said, we have narrowed it down to my GPO, which they cannot be much help with. I would like to say that they have been extremely helpful and more than willing to spend time helping me with this problem. I have been working closely with Kaspsersky on this issue.
0 kommentar(er)
