ENS Linux Firewall blocking ssh on installation even with fwoff option used

[Randy_Bell1]

Environment:

ePO: 5.9.1

managed endpoint: RHEL 6.10 VM w/ Linux Agent 5.6.5.236 and ENSL Threat Prevention 10.7.3.46

I tried Run Client Task now -> Agent -> Product Deployment -> ENSL Firewall 10.7.3.25 with Command line: fwoff (per KB91310). The product installed and ePO showed the firewall status as Disabled, but an ssh session I had active at the time, stopped. In addition, I could not ping nor reconnect to the endpoint via ssh. Ugly workaround was to log into the VM's console and restart the firewall (mfefwd-control.sh restart).

How can I avoid the disruption of connectivity to an endpoint when deploying ENSL FW?

[yaz]

Hi @Randy_Bell1 

Thanks for reaching out to community. 

If Firewall is turned off and if still ssh is blocked, then it seems like an issue. 

Kindly gather MER logs as per the KB below and log an SR for detailed investigation on this. 

https://kc.mcafee.com/corporate/index?page=content&id=KB88197

Was my reply helpful?

If Yes, please give me Kudo.

If this resolved your query, kindly mark this as solution so that together we help other community members.