Installing on an Enforce Server with multiple NICs

Products

• Data Loss Prevention Enforce

Issue/Introduction

Multi-homed hosts are the norm for Enforce (back-up and LAN connection). Enforce has problems at times with the Detection servers binding to the wrong IP addresses (not the LAN NIC).

Resolution

Multi-homed hosts are the norm for Enforce (back-up and LAN connection). Occasionally, Enforce has problems with the detection servers binding to the wrong addresses (not the LAN NIC). You should only check one NIC on the Enforce side.

To allow the Monitor (Detection Server) to communicate to the Manager (Enforce Server), the following properties files must be changed (Note: <IP> is the IP address that you want to bind on):

On the Manager (Enforce Server):
C:\Program Files\Symantec\DataLossPrevention\EnforceServer\15.8.00000\Protect\config\model.properties
model.notification.host=<IP>
model.notification.serverobject.host=<IP>
model.notification.bindaddr=<IP> 

On the Monitor (Detection Server):
C:\Program Files\Symantec\DataLossPrevention\DetectionServer\15.8.00000\Protect\config\Communication.properties
serverBindName = <IP>