Endpoint Protection

 View Only
  • 1.  SEP and Ghost

    Posted Aug 02, 2012 04:08 PM

    Hi

    This question was asked on the blog and I was told to open a case here:

    I've been trying to figure out how to configure the firewalls for an old version of ghost (7.5). SEP (11) is installed on both the client (XP) and the server (Server 2003). If I drop the firewall on both sides, the backup runs just fine. It's just that I haven't been able to figure out what rules I need so the firewall doesn't have to be dropped. The simplest approach I found was to open UDP 1345-7,6666, and 7777 in both direcitons on both ends, but that didnt' work. I found a couple of other articles that talk about IGMP (which should work here) and how the communication works between both ends, but was unable to get things to work. Sometimes I get a heartbeat, but that will go away after a while. I've had it work a couple of times, but never more than once in a row.

    So, it comes down to "What are the firewall rules needed to get ghost to run?". Thank you!



  • 2.  RE: SEP and Ghost

    Posted Aug 02, 2012 06:50 PM

    Hi,

     

    Are you disabling the firewall policy and then the issue goes away? Or are you disabling the firewall feature and the issue goes away? Are you receiving errors?

    If there are errors can you copy and paste here?

     

    You can create an allow all rule and walk it up to the top to determine which rule is causing the issue.



  • 3.  RE: SEP and Ghost

    Posted Aug 02, 2012 07:05 PM

    Hi

    Thanks for the quick response!

    SEP->Network Threat Protection                 Options->Disable Network Threat Protection.

     

    Yeah, I started that way, but things kept working and then not working that I guess I just got confused. For instance, last night I had a heartbeat when I left. I came in today and it's indicating there isn't one. Same policy as when I left. I have no idea what changed. As I said, I've even managed to get ghost to actually start backing the client up (packets moving on UDP 7777), but then try again and it won't work. That's the reason I'm asking for help.



  • 4.  RE: SEP and Ghost

    Posted Aug 03, 2012 12:12 AM

    All i can suggest you to check the firewall and Application Log and see what port or application related to Ghost is getting blocked and simply Exclude it using Exception Policy or from Firewall Rule.