The IP used by the patch agent service does not choose the correct IP address to communicate the remediation progress.
The following error would be logged in 'C:\Windows\Patches\PatchAgent.log:
2012-02-10,14:15:16,"error",Error WinSock/connect(). WSAGetLastError returned 10061. Sock 192.168.200.250:1169
In the case above, 192.168.200.250 is not the correct IP that be used for sending remediation status back to the LanGuard console.
- GFI LanGuard
- All supported environments
- In the GFI LanGuard console go to Configuration -> Agents Management and click on Agents Settings. The Agents Settings dialog will open.
- On the General tab under Communications choose the correct IP address from the drop-down list.
- Note: The Default setting will cause the Agents (for all communications) and the Patch Agent Service (during remediations) to use the DNS name of the LanGuard server to communicate back to the LanGuard server. If DNS name resolution is slow or does not resolve the IP Address of the LanGuard server, the communication attempt will fail. In this case, setting this to a fixed IP address will cause Agents and the Patch Agent Service to connect directly to the LanGuard IP Address without having to resolve it first.
To confirm that this change has taken place, the following entry can be found within C:\ProgramData\GFI\LanGuard 12\toolcfg_simple.xml
When LanGuard is installed on a machine with multiple network interface cards, there are cases where the internal logic can pick the incorrect interface to communicate with.