Data Loss Prevention

 View Only
  • 1.  network monitor server remains unknown on enforce server?

    Posted Dec 15, 2011 09:41 AM

    Hi,

    I have recently installed network monitor and I'm trying to add it on the enforce server, but for some reason the enforce server insists on mantaining an 'UNKNOWN' status. Does anyone have any idea how i can go about investigating why this might be and then resolving it?

     

    So far i have tried restarting services on both enforce and detection server; checking the install was done probably, logs indicate it was; rebooting both machines at separate times; changing the bind address using IP and DN.

     

    Any ideas on why the enforce server may not be picking it up?



  • 2.  RE: network monitor server remains unknown on enforce server?

    Posted Dec 16, 2011 01:38 AM

    - Ensure that you are able to telnet from the Monitor to Enforce on port 8100.

    - Make sure that all the DLP services are running



  • 3.  RE: network monitor server remains unknown on enforce server?

    Posted Dec 16, 2011 10:27 AM

    Hi Denis thanks for your suggstion,

    Checked out telnet and no joy connecting through it. The situation is this, if i use the standard telnet port 23 I can communicate between servers in either direction and to both from another random machine on the network. However on port 8100 it's not happening. I went about opening the ports using the 'netsh' tool but even after this I still can't communicate between the two servers using telnet?  Any thoughts on this?

    OFC i have checked all the services are running.

    I am gonna try reinstalling the network monitor detection server software see if i missed something in the install - will update what happens



  • 4.  RE: network monitor server remains unknown on enforce server?
    Best Answer

    Posted Dec 16, 2011 11:05 AM

    Success! Reinstall did the trick, Bind address was set wrong... sometimes it's the simplest things.



  • 5.  RE: network monitor server remains unknown on enforce server?

    Posted Dec 20, 2011 04:40 AM

    Have same trouble but with firewall turned on by default on windows server 2008 r2.