We are getting the following error message everytime the client tries to connect to each repository and then fallbacks to Mcafee via http
20090121172658 I #528 InetMgr Failed to MAP share using NetAPI now using WNetAddConnection2, return code=53 20090121172658 W #528 InetMgr Failed to map share using WNetAddConnection2 20090121172658 e #528 InetMgr Failed to connect to server eccsrs10022753. Check the agent log for more details. 20090121172658 I #528 InetMgr Delay = -1 20090121172658 I #528 InetMgr Impersonated token closed 20090121172658 I #528 InetMgr UNC Session closed
The only thing that i can see different from the working machines is the network route. These specific machines go via a firewall.
Agent-to-server communication port: 90 Agent wake-up communication port: 8081 Agent broadcast communication port: 8082 Event parser-to-application server communication port: 8445 Console-to-application server communication port: 8443 Sensor-to-server communication port: 8444
Does anyone know the port that is used to obtain the updates from repositories?
I suppose you use UNC repositories. For these you have to enable NetBIOS via your firewall which is not a good idea. I would switch to SuperAgent Repositories. To connect to a SA Rep you only need to enable the agent wakeup call port.