Install DLP agent without the Endpoint Prevent IP address

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

A customer needs to install the DLP agent without including the IP address of the Endpoint Prevent Server because they are building a Windows image and they do not want the agent to communicate with the Endpoint Prevent when installed. After they deploy the image on machines, they want to inject the Endpoint Prevent IP address based on the location of the machine.

Environment

Release : 15.8.x, 16.0.x

Resolution

To work around this issue:

1. When installing the DLP agent we use the either install_agent.bat or upgrade_agent.bat file. In this file, the IP address of the Endpoint Server is mentioned. Change the IP address in the bat file from the original IP address to 0.0.0.0 and then install the agent.

2. Once the agent is installed, it will not be able to communicate with the Endpoint Prevent Server because 0.0.0.0 is a dummy IP.

3. Once you are ready to push the Endpoint Prevent IP address to the agent, you can use the Vontu_Sqlite3 tool. Follow the instructions in the KB article "Change a DLP agent from one Endpoint Server to another."