How to change Endpoint server using vontu_sqlite3 tool

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

You can't change the endpoint server using Enforce console, so you can use vontu_sqlite3 tool to change the Endpoint server to which agent is reporting to.

 

Need to perform below steps on endpoint agent.

 

Resolution

12.0.1 and earlier

1. Get a copy of the Vontu_Sqlite3.exe tool from the VontuAgentInstaller.zip package

2. Copy the vontu_sqlite3 file To c:\program files\manufacturer\endpoint agent

  

(Note: The tool must be executed and present in the same directory as the agent's

keystore file (ks.ead)).

 

 

3. From a cmd prompt, having changed directory to the Endpoint Agent directory, execute:

 

vontu_sqlite3 -db=<database file> [-p=<password>]

 

Example:  vontu_sqlite3 -db=cg.ead -p=VontuStop

 

If the password is not entered at the command line, the tool will prompt you

for a password. Default password is vontustop

 

4. Run the following command from the SQLite prompt:

 

UPDATE configuration set value=’10.10.10.0’ WHERE setting=’AggregatorHost’;

 

Replace 10.10.10.0 with the actual ip address.

 

You need to restart the agent after making this change.

 

5. To check if the new Endpoint server is configured on the Endpoint agent

using Vontu_sqlite3.

 

Run the vontu_sqlite3 -db=cg.ead -p=VontuStop

 

Enter the following command to check the first Endpoint server entry.

 select value from configuration where setting='AggregatorHost';

 

 

6. If you have multiple endpoint servers configured on the Endpoint agent for

failover

 

Run the vontu_sqlite3 -db=cg.ead -p=VontuStop

 

Enter the following command to check the first Endpoint server entry.

select value from configuration where setting='AggregatorHost';

 

Enter the following command to check the second Endpoint server entry.

 select value from configuration where setting='AggregatorHost2';

 

 

12.5 and Later

1. Get a copy of the Vontu_Sqlite3.exe tool from the VontuAgentInstaller.zip package

2. Copy the vontu_sqlite3 file To c:\program files\manufacturer\endpoint agent

  

(Note: The tool must be executed and present in the same directory as the agent's

keystore file (ks.ead)).

 

 

3. From a cmd prompt, having changed directory to the Endpoint Agent directory, execute:

 

vontu_sqlite3 -db=<database file> [-p=<password>]

 

Example:  vontu_sqlite3 -db=cg.ead -p=VontuStop

 

If the password is not entered at the command line, the tool will prompt you

for a password. Default password is vontustop

 

4. Run the following command from the SQLite prompt:

 

UPDATE configuration set value=’10.10.10.0:10443’ WHERE name=’ServerCommunicator' and setting=’SERVER_HOST_AND_PORT_LIST’;

 

Replace 10.10.10.0:10443 with the actual ip address and port number.

 

You need to restart the agent after making this change.

 

5. To check if the new Endpoint server is configured on the Endpoint agent

using Vontu_sqlite3.

 

Run the vontu_sqlite3 -db=cg.ead -p=VontuStop

 

Enter the following command to check the first Endpoint server entry.

select value from configuration where name='ServerCommunicator' and setting='SERVER_HOST_AND_PORT_LIST’;