ENSL Firewall install drops connections

[Former Member]

Installing ENSL 10.7 Firewall on RHEL6 boxes from the ePO causes the connections on the endpoints to be dropped. Is there a way to install without the connections being dropped or a better way to resume connections other than reset?

[ryadav1]

moving it to correct channel

[Kenchee_etf]

Hello @Former Member 

How are you deploying ENSFW on Linux, ePO or standalone?

For standalone install you may use:

sudo ./install-mfw.sh fwoff

from

*** Installation options for Endpoint Security for Linux Firewall
https://kc.mcafee.com/corporate/index?page=content&id=KB91310&locale=en_US

I hope this helps.

[Kenchee_etf]

My apology @Former Member, I skipped the info about ePO deployment.

Let me take a look for that one as well.

[Former Member · Accepted solution]

We don't have admin access to the machines, but the local SAs found that resetting iptables restored the connections. That solution is good enough for us! Thanks for checking this out @Kenchee_etf .

Update 12/14/2020
Installing from the ePO with the "fwoff" command line switch also works. No connections were disrupted and it worked if the fw policy was being enforced or not.

[Randy_Bell1]

I used the fwoff option on deployment from ePO 5.9.1 and still lost connections (ssh sessions). Also I couldn't ping or reconnect after the installation completed. Had to access the VM endpoint via a virtual console and restart the firewall. Very inconvenient!