Re: [qubes-users] “Help! Qubes problems" : McAfee ENS not not installing on debian-10 Template vm

2020-01-19 Thread Chris Laprise

On 1/19/20 3:10 PM, 'awokd' via qubes-users wrote:

Arshad Ali:

Hi guys,

I am new in Qubes OS, I need help regarding installation of McAfee on
debian VM,

I have installed McAfee Agent on debian-10 Template vm, When I am trying to
push ENS package from McAfee server to debian-10 Template VM its getting
fail.

 From McAfee server I can only see sys-net connectivity with McAfee, where
as McAfee agent is installed on debian vm,
I am not sure where the problem is actually exist. Do I need to do any port
forwarding on sys net and sys firewall (If It is  how it can be, ).
As I didnot make any rules in Firewall which is by default allowing all and
internet is running on debian vm.


I think you're missing some of the basics of Qubes. Check out
https://blog.invisiblethings.org/2011/09/28/playing-with-qubes-networking-for-fun.html,
for example. Qubes' networking is designed to prevent things outside
your PC from connecting with things inside it. If you really wanted to,
see https://www.qubes-os.org/doc/firewall/. Keep in mind though,
templates intentionally do not have a network connection, so what you're
trying to do wouldn't work even with port forwarding. You should also
consider in general if installing third party software raises or lowers
your security posture, as antivirus suites have historically had
multiple vulnerabilities and are designed to upload files for further
analysis based on criteria set by the third party.


I think the transfer model for third-party definition updates in 
template vms would be to utilize a dispvm to download an update pack 
(e.g. in .zip or .tar format) which can then be qvm-copied to the 
template vm and fed to the antivirus software. IOW, the antivirus vendor 
should have an offline update procedure you can follow, you just need to 
add qvm-copy to the process.


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/65849104-0e7e-c792-f8ae-3e7f6aa872d2%40posteo.net.


Re: [qubes-users] “Help! Qubes problems" : McAfee ENS not not installing on debian-10 Template vm

2020-01-19 Thread 'awokd' via qubes-users
Arshad Ali:
> Hi guys,
> 
> I am new in Qubes OS, I need help regarding installation of McAfee on 
> debian VM,
> 
> I have installed McAfee Agent on debian-10 Template vm, When I am trying to 
> push ENS package from McAfee server to debian-10 Template VM its getting 
> fail.
> 
> From McAfee server I can only see sys-net connectivity with McAfee, where 
> as McAfee agent is installed on debian vm,  
> I am not sure where the problem is actually exist. Do I need to do any port 
> forwarding on sys net and sys firewall (If It is  how it can be, ). 
> As I didnot make any rules in Firewall which is by default allowing all and 
> internet is running on debian vm. 
> 
I think you're missing some of the basics of Qubes. Check out
https://blog.invisiblethings.org/2011/09/28/playing-with-qubes-networking-for-fun.html,
for example. Qubes' networking is designed to prevent things outside
your PC from connecting with things inside it. If you really wanted to,
see https://www.qubes-os.org/doc/firewall/. Keep in mind though,
templates intentionally do not have a network connection, so what you're
trying to do wouldn't work even with port forwarding. You should also
consider in general if installing third party software raises or lowers
your security posture, as antivirus suites have historically had
multiple vulnerabilities and are designed to upload files for further
analysis based on criteria set by the third party.

-- 
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/08fa44c6-185d-c01f-45d6-52d269f6943c%40danwin1210.me.


[qubes-users] “Help! Qubes problems" : McAfee ENS not not installing on debian-10 Template vm

2020-01-16 Thread Arshad Ali
Hi guys,

I am new in Qubes OS, I need help regarding installation of McAfee on 
debian VM,

I have installed McAfee Agent on debian-10 Template vm, When I am trying to 
push ENS package from McAfee server to debian-10 Template VM its getting 
fail.

>From McAfee server I can only see sys-net connectivity with McAfee, where 
as McAfee agent is installed on debian vm,  
I am not sure where the problem is actually exist. Do I need to do any port 
forwarding on sys net and sys firewall (If It is  how it can be, ). 
As I didnot make any rules in Firewall which is by default allowing all and 
internet is running on debian vm. 


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bfa7f911-e014-49b7-aadc-514afb738418%40googlegroups.com.