Rollback of Comodo Client Security v11.2.0.7313

[Can]

Hi everyone,
Due to a recent detection of some network issues related to latest CCS release (v11.2.0.7313), we have just rolledback the available CCS build to the previous version (v11.1.0.7259) on Endpoint Manager until a hot fix is deployed. Engineering team is on the issue right now and preparing the fix.

Following announcements will be done under this topic.

Thank you for your understanding.
Comodo CyberSecurity Team

[Jimmy]

Can ,

Would this process restart our endpoints and servers?

[Can]

Hi Jimmy ,

No, it would not.

The endpoints that have CCS v11.1.0.7259 installed will not be affected at all.

However, the users who upgraded CCS agent on their endpoints since the last Saturday will have to remove it and install it again. This action may require reboot based on the reboot policy defined in the related profiles.

Thanks,
-Can

[StrobeTech]

Hi Can

thank you for making this announcement public.

Our understanding of the issue is that you either have to uninstall CCS on devices with the latest version and install the older version; or disable your firewall until the fix is ready which leaves you and your clients at a higher security risk than normal.

[Can]

Hi Can

thank you for making this announcement public.

Our understanding of the issue is that you either have to uninstall CCS on devices with the latest version and install the older version; or disable your firewall until the fix is ready which leaves you and your clients at a higher security risk than normal.

Hi StrobeTech ,

Yes, you are right. Although disabling Firewall module seems helpful, we strongly recommend to downgrade the agent and keep using it with all functionalities for security purposes.

Regards,
-Can

[StrobeTech]

Hi StrobeTech ,

Yes, you are right. Although disabling Firewall module seems helpful, we strongly recommend to downgrade the agent and keep using it with all functionalities for security purposes.

Regards,
-Can

Totally agree on the security side; but removal of CCS has always been an issue.

[Ed_Johnson]

As the problem apears to disable the internet on affected devices.. I assume the above advice nececitates a site visit for EVERY device???

[Ed_Johnson]

I understand the implications of disabling the firewall, but as I rolled out 11.2 of CCS to all my clients today, a site visit to every client is impossible.. My very temporary work around is to disable the firewall in the default profile until either a fix is a vailable or I can arrange a site visit to all affected clients. What a disaster

[smartcloud]

One step forward and two step back - seems to be the comodo way lately.

This is not the first time the client is bad and it has been bad for us.
Like Ed said above - "what a disaster"

The really bad part is the only way we know about this is to follow the forum.
Insane that Comodo does not notify us like every single software company does.

I used to be excited about updates to Comodo but not anymore.
its like "what will break this time".

[Can]

As the problem apears to disable the internet on affected devices.. I assume the above advice nececitates a site visit for EVERY device???

Hi Ed_Johnson ,

You don't necessarily have to visit every device to remove CCS and re-install it. We have these two scripts that you can run through Endpoint Manager - Procedures:

• https://scripts.itarian.com/frontend...nt-with-reboot
• https://scripts.itarian.com/frontend...without-reboot

After the uninstallation is completed, you can install CCS v11.1.0.7259 from Endpoint Manager

Regards,
-Can

[Ed_Johnson]

Hi Ed_Johnson ,

You don't necessarily have to visit every device to remove CCS and re-install it. We have these two scripts that you can run through Endpoint Manager - Procedures:

• https://scripts.itarian.com/frontend...nt-with-reboot
• https://scripts.itarian.com/frontend...without-reboot

After the uninstallation is completed, you can install CCS v11.1.0.7259 from Endpoint Manager

Regards,
-Can

My post was regarding devices already affected by 11.2 that had lost their connection. You cant remotely run procedures or disable the firewall on a device that is no longer connected to the internet.

[StrobeTech]

My post was regarding devices already affected by 11.2 that had lost their connection. You cant remotely run procedures or disable the firewall on a device that is no longer connected to the internet.

Disable FW, then get clients to reboot computer as this after about 30 minutes disables the firewall and restores connection so you can remove the virus.... I mean buggy V11.2 :P

[Ed_Johnson]

Disable FW, then get clients to reboot computer as this after about 30 minutes disables the firewall and restores connection so you can remove the virus.... I mean buggy V11.2 :P

Yeah that's what I've been doing ALL day !

[datatainment]

A Disaster!!

Why can't you rollback the version via the platform?!

[datatainment]

And why can't you let us know by mail about this?