Mar 15, 2013 12:17 PM
Leith Tussing - University of Central Florida
After installing HIPS 8 HF 803520 all of our test Windows 7 & 8 systems began showing Action Center events saying there was no Firewall installed. We do not use the Firewall portion of HIPS and it is actually disabled in the ePO policies for it. I looked through all of the HIPS ePO policies and there is nothing in there about enabling/disabling the Windows Firewall or allowing it to be active or not. Clicking on the "Turn on Windows Firewall" does not enable it as can be seen from the two images below.
I have a support ticket in for this now, I'll update once a resulution is discovered.
I have figured out the same behavior after deploying hotfix 803520.
Please tell me if you have found a solution for this problem or when your support ticket comes back.
My ticket has been escalated to past Tier III and is being worked on. I've been told the issue itself is actually just cosmetic in that the Windows Firewall is still functioning, however until this is resolved I will not be deploying the patch as it will cause more issues in help desk tickets than it would provide benefits.
What is worse is that when I had this issue I tried to roll back HIPS and now I can't get HIPS to reinstall at all! Constantly says that it's installed successfully but doesn't...anyone had this issue?
I haven't tried since I only deployed it to our limited testing group and we're just living with the alert.
What method did you use to roll back HIPS?
It's been about a week now that I've had this issue but I think I tried to rollback and just do a reinstall of our original 188.8.131.521 pkg. This worked on my laptop but didn't work out so well for my desktop...the only reason I noticed the alerts was because I had noticed some excessive slowness as well on my desktop and knew I had applied the patch. I went into the FW settings and noticed the error and thought...that's not going to go over well...especially when I wasn't even tolerating the slowness and I test things all the time!
I would suggest you before rollback try this
Disable QoS stack on machine inquestion and then see the issue.
The problem is that HIPS isn't installed anymore at all - I've tried to rip it all out and still it won't reinstall. I even started from scratch and removed the agent, VSE 8.8...everything! I've had lots of suggestions but nothing has worked. It also tries to get me to restart over and over when I tried to install via EPO. I'm fairly certain something is botched now...