Content not replicating to Agent Handler in DMZ

[ezim]

We have an Trellix ePolicy Orchestrator  5.10 Agent Handler in the DMZ.

The clients are connecting properly from the internet. They receive their policies and are able to send properties and events.

The clients request DAT updates. The request reaches the Agent Handler.

BUT there is no content in the \Agent Handler\DB\RepoCache\* folders.

So the clients run the update task successfully, but do not receive the new DAT files available in the Master Repository.

[cdinet]

Check KB66797 for required ports to be open.  The agent handler requires ports 8443, 8444 and 443 specifically open from AH to the epo server for that to work and the AH needs to resolve the epo and sql servers by FQDN.  If it can't, they should add host file entries for that.

[ezim]

Thank you for your reply @cdinet 

I'm being told that the FW ports are open.

And I can resolve FQDN on the AH.

I've been looking for a log file to check what the AH is up to and why it is not pulling the content from the ePO server. Could you point my in the right direction for that?

[cdinet]

The server log in the install directory, db\logs will show errors pulling content from epo.

[ezim · Accepted solution]

I have not been able to pin down the underlying problem.

However, an un-install and re-install of the Agent Handler has resolved the problem.