Endpoint Security Complete

I have setup a DNS entry with "A" record of MDM.domain.com and a "TXT" record as follows: android-mdm-enroll=https://mdm.domain.com/mobileenrollment/symc-androidenroll.aspx.

My IIS is configured with SSL.  Symantec Agent installed on the Samsung Android.  The user fails no matter I use the user name or URL.

This is my internet URL: https://mdm.domain.com/mobileenrollment/symc-androidenroll.aspx.

I cannot access this URL from a computer inside my network or from the Internet.  The way it should work is when a Internet User hits the URL the request comes to our firewall and firewall forwards the request to our Symantec Mobile Server inside out LAN on 192.x.x.x.

On our LAN, If I replace the domain name with the name of our Symantec Mobile Server as follows:

https://FQDN/mobileenrollment/symc-androidenroll.aspx I see the following:

<?xml version="1.0" encoding="utf-8" ?>

PS: Once I succeed here then I will setup a reverse proxy in my DMZ and point the requests to our Sym Mobile Server in our LAN.

Any ideas please - Thanks!

ok  - Now I am able to access the Internet link from internal and external ... it was a dns lag. But my Android is still failing to register with email address or the URL.

please advise  -thanks!

Hi WP,

What are the errors you have?

-nlog folder
-windows events
- IIS logs
- NS logs
- Android agent logs

Thanks Mina ...

Android log shows following ....

failed to conenct to mdm.ourdomain.com/IP (port 443) after 10000ms - https://mdm.domain.com/mobileEnrollmet\Smc-androidenroll.aspx

Enroll All targets failed

Nlog shows:

2012-08-13 08:21:58.5779 ERROR Error getting device_flags from parameters System.FormatException: Input string was not in a correct format.
   at System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal)
   at System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info)
   at System.Convert.ToInt32(String value)
   at SYMCAndroidEnroll.RegisterDevice.Page_Load(Object sender, EventArgs e)
2012-08-13 08:32:27.5000 WARN  User authentication failure: mynameemailaddss@domain.com
 

Nothing in the Windows Event Viewer

Weblogs does show we me the IP Address of my Android ... which means its hitting the server,,,,

 
2012-08-13 12:57:12 192.x.x.x GET /mobileenrollment/symc-androidenroll.aspx app_name=Mobile%20MGMT&app_package=com.symantec.mobile.mdm&app_version=1.0.4541&device_id=05010000A1C28F858CD573081DC936B277B9E428&device_phone=14169947163&device_serial=56741b91&device_cpu=armeabi-v7a&device_build=IMM76D.TLLF4&device_level=15&device_maker=samsung&device_model=SGH-I717D&device_version=4.0.4&device_flags=0&android_id=A2C04D36F3435B28&user_locale=en_CA&inet_addresses=10.111.64.222 443 - 207.219.69.222 Dalvik/1.6.0+(Linux;+U;+Android+4.0.4;+SGH-I717D+Build/IMM76D) 200 0 0 733

2012-08-13 12:57:45 ::1 POST /Altiris/Workflow/ServerMonitoring.asmx - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.5420) 200 0 0 31
2012-08-13 12:57:53 ::1 POST /Altiris/NS/Console.asmx - 443 OURDOMAIN\MDMACCNT ::1 Mozilla/4.0+compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+.NET4.0C;+.NET4.0E) 200 0 0 152012-08-13 12:58:04 ::1 POST /iosws/APNSWS.asmx - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.5420) 403 4 5 15

10.111.64.222 443 is the IP of my Android -

207.219.69.222  -Not sure what this is ... coz this is not our IP 

ok.  Issue was resolved.  Typo.