Data Loss Prevention

 View Only

Changing the DLP Endpoint Agent Server Automatically 

Sep 27, 2013 11:31 AM

The Problem:

Currently within the DLP System there is no way to change a group of agents automatically, the only way is to do this manually through the Enforce Management Console. If you have a large number of agents this needs to be perfomed on it can be tedius. 

In the Management Console navigate to System -> Agents -> Overview and then select the computers you want and under the Actions menu you can change the Endpoint Server these computers communicate with.

Once again this is a bit tedious.

 

The Solution:

The update_configuration.exe file that is included in the SymantecDLPWinAgentTools_X.zip file can solve this problem.  The update_configuration.exe file needs to be in the same location as the Endpoint Agent is installed.

To change the DLP Endpoint Agent server:

  1. Verify the update_configuration.exe file is in the same location as the agent installed
  2. Execute the following command:

update_configuration.exe -name=AggregatorCommunicator -setting=AggregatorHost -type=str -value=server1

This does not require a restart of the DLP Endpoint Agent

To add an additional Endpoint Agent Server:

  1. Verify the update_configuration.exe file is in the same location as the agent installed
  2. Execute the following command:

 update_configuration.exe -name=AggregatorCommunicator -setting=AggregatorHost2 -type=str -value=server2

This requires a restart of the DLP Endpoint Agent

 

Statistics
0 Favorited
6 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Oct 14, 2015 09:35 AM

Awesome thanks for the update

Oct 14, 2015 04:46 AM

In version 12.5 the command used is different to move the agent. Here is the command: 

update_configuration.exe -name=ServerCommunicator -setting=SERVER_HOST_AND_PORT_LIST -type=str -value=<EPS_IP>:10443

You’ll need to replace the <EPS_IP> with your EPS server IP and also make sure the port in UBS is the same as the default 10443 otherwise you need to change it too to match your EPS communication settings configured in the Enforce console. 

 

Related Entries and Links

No Related Resource entered.