Community Help Hub

User27605043 · ‎01-09-2023

Deploying an AH to an isolated DMZ that serves a small number of clients, the question is there any issue with installing the Agent Handler to a Windows server that also fills another role (not ePO or ENS related)?

Stewart

cdinet · ‎01-09-2023

Additionally, you may need to put host file entry for fqdn of epo and sql servers so it resolves correctly, and if the dmz ah isn't on the domain, use an sql authenticated account. Also, if you are using any user based policies at all, enable database mirroring in server settings, user policies. That isn't true sql mirroring, but it caches the ldap lookups for users in the database so the ah doesn't have to query ldap server every time.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

cdinet · ‎01-09-2023

There shouldn't be any problem with that as long as there are no port conflicts for apache.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

User27605043 · ‎01-09-2023

I am assuming the Ports would be those listed in ePO under Server Settings > Ports?

Stewart

cdinet · ‎01-09-2023

https://kcm.trellix.com/agent/index?page=content&id=KB66797 is the port requirements doc. It lists what is needed for agent handlers and epo.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

cdinet · ‎01-09-2023

Additionally, you may need to put host file entry for fqdn of epo and sql servers so it resolves correctly, and if the dmz ah isn't on the domain, use an sql authenticated account. Also, if you are using any user based policies at all, enable database mirroring in server settings, user policies. That isn't true sql mirroring, but it caches the ldap lookups for users in the database so the ah doesn't have to query ldap server every time.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Agent Handler DMZ Install question

Re: Agent Handler DMZ Install question

Re: Agent Handler DMZ Install question

Re: Agent Handler DMZ Install question

Re: Agent Handler DMZ Install question

Re: Agent Handler DMZ Install question

Community Help Hub

Join the Community