Data Loss Prevention

 View Only
Back to discussions
Expand all | Collapse all

Can't see DLP Agents on Agents Overview Page

  • 1.  Can't see DLP Agents on Agents Overview Page

    Posted Apr 23, 2013 03:12 PM

    I'm implementing DLP  for a demo

    My scenario: Enforce server ---- SMP + Endpoint Server --- DLP Client

    I deploy the DLP agent via SMP. I can see that DLP agent has been installed on the client

    However, I cant see the DLP Agent registered on the Agent Overview page [on Endforce Server]

    Need help

     



  • 2.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 23, 2013 04:02 PM

    Harold,

     

    confirm a few things

     

    1- firewall on ndpoint or endpoint server not blocked by firewall

    2- if they are in sepereate v lans confirm vlans can talk to each other

    3- you have the correct ip address/fqdn of endpoint server for script. also confirm if fqdn is used that you can resolve name, 

    4-that the services actually started on ednpoint (watchdog and edpa)



  • 3.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 23, 2013 04:21 PM

    Hello stumunro

    1. Not using firewall or any like that

    2. No vlans. Its a virtual environment, for demo purpose

    3. Yes. Correct ips and everythings. Not using DC, but is it necessary??

    4.Yep, services on DLP agent are working. SMP is seeing the DLP agent as 'Running'

     

     



  • 4.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 23, 2013 04:23 PM

     

    Hello stumunro

    1. Not using firewall or any like that

    2. No vlans. Its a virtual environment, for demo purpose

    3. Yes. Correct ips and everythings. Not using DC, but is it necessary??

    4.Yep, services on DLP agent are working. SMP is seeing the DLP agent as 'Running'



  • 5.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 23, 2013 05:11 PM

    harold,

    is there a firewall on the server? i would put wireshark on one of te pcs and see if the agents are sending out traffic and it has the correct ips... otherwise i will take some digging is should just work...wheni say firewall this includes any software ones also like windows or the sep one.

     



  • 6.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 23, 2013 06:01 PM

    No, no firewall, antivirus or other program.

    I'm using clean vms for this dlp demo.

    I cant make the DLP client connect to the Endforce

    I can see [via SMP] that DLP client is working ok, but it doesnt connect to Endforce

     

    Help, please



  • 7.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 23, 2013 08:31 PM

     

    No, no firewall, antivirus or other program.

    I'm using clean vms for this dlp demo.

    I cant make the DLP client connect to the Endforce

    I can see [via SMP] that DLP client is working ok, but it doesnt connect to Endforce

     

    Help, please



  • 8.  RE: Can't see DLP Agents on Agents Overview Page

    Trusted Advisor
    Posted Apr 24, 2013 01:48 AM

    hi harold,

     

     does your endpoint server is up and running ? DLP client never connect to the enforce, it must connect to the enforce server which is connected to the enforce. so it also means that endpoint must be configured to connect to the endpoint server and not to the enforce.

    Did you check that each vm can ping the others on the port used by each system ?

    regards



  • 9.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 26, 2013 11:36 AM

    Hi Harold,

    Try using installation script for endpoint installation.

    In sript you need to enter require information, u can download installation scripthttps://fileconnect.symantec.com.

     



  • 10.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 28, 2013 06:56 AM
    Hi haroldvm89,
     
    Please check the connectivity/communication between Enforce and Endpoint servers if this things are absolutely ok w.r.t networking and ports of respective servers the also try below.
     
    1. Restart the Endpoint server and check on Enforce Agent overview.
    2. view previelages as per your role based access
    3. Agent deployment script points to correct endpoint server as per IP/host name which should be static.


  • 11.  RE: Can't see DLP Agents on Agents Overview Page

    Posted Apr 28, 2013 08:25 AM

    Hi Harold,

    Also refer below

    https://www-secure.symantec.com/connect/downloads/sma-dlp-agent-integration-behavior



  • 12.  RE: Can't see DLP Agents on Agents Overview Page
    Best Answer

    Posted May 18, 2013 01:54 AM

    There's a task on SMP called "Change Endpoint Server"

    In this task, you need to add the IP address of your Endpoint Server, and clic on "Test connection"

    If connection is successful, save the task, or run it on the DLP clients.

    After a while, DLP clients will appear on Enforce Server > Agente Overview Page

     

    Thanks everybody :)