Data Loss Prevention

 View Only
  • 1.  agent disconnect from the endpoint server after CHANGE THE endpoint server

    Posted Sep 12, 2013 11:21 PM

    here is 2 Servers

    A serevr is single Tiger : Enforce + endpoint4

    B server is Detection : endponit5

    DLP version : 11.5.1000.06038

    OS:windows 2008 SERVER R2 , firewall closed,

    net:   both 2 servers in same subnet

    windows host file add each IP in Servers

     

    at the agent with tools :vontu_sqlite3 Aggregator|str|x.x.x.4

    1- if a agent "change endpoint server" from  endpoint4 to endpoint5 ,it finished quikely and connected. .check the cg.ead .and the agent changed to 

    Aggregator|str|x.x.x.5   (B server IP)

    2- if a agent "change endpoint server" from  endpoint5 to endpoint4 ,the agent will lost the connection . but check the cg.ead  , it show below:

    Aggregator|str|A server hostname   (A server hostname)   

    Now is the puzzle:

    how cloud i do ,  to sure after chang endpoint server use IP Address not the hostname ?

     



  • 2.  RE: agent disconnect from the endpoint server after CHANGE THE endpoint server

    Posted Sep 13, 2013 12:39 PM

    Hi,

    This depends on how you have configured the installation batch file while installing the agent. .

    If you want to change the IP, you have two options :

    1. Reistall the agent with the IP.

    2. Reset the endpoint server using Sqlite3 :

    Copy vontu_sqlite3 on the Endpoint machine.  This tool is included with the VontuAgentInstaller.zip package.

    Once installed, login to SQLite with the password.  The default password is VontuStop, but can be changed by the administrator using the endpointkeytool on Enforce before any agents are installed.

    To run this tool, execute:

    vontu_sqlite3 -db=<database file> [-p=<password>]

    Example:  vontu_sqlite3 -db=cg.ead -p=VontuStop

    NOTE: The tool must be executed and present in the same directory as the agent's keystore file (ks.ead). This file is normally installed in the agent installation folder, e.g. _c:\program files\manufacturer\endpoint agent. If the password is not entered at the command line, the tool will prompt you for a password.

    Once the tool is installed, run the following command from the SQLite prompt:

    UPDATE configuration set value=’10.10.10.0’ WHERE setting=’AggregatorHost’;

    Replace 10.10.10.0 with the actual ip address.

    You need to restart the agent after making this change.

    Hope this helps!

    Thanks,

     



  • 3.  RE: agent disconnect from the endpoint server after CHANGE THE endpoint server

    Posted Sep 23, 2013 02:50 PM

    Hi,

    Do you have any further quarries ???



  • 4.  RE: agent disconnect from the endpoint server after CHANGE THE endpoint server

    Posted Sep 30, 2013 11:25 PM

     Hi,

    if So, you can change their  detection to new endpoint server. inorder to communicate to the new endpoint.

    how:

     

    go to SYSTEM > AGENTS> OVERVIEW

    check on machine> ACTION> then change endpoint server.

     

    hope this will help.