At times, an Endpoint Agent will behave in a way contradictory to expectation. Larger than simply missing a single policy, the Endpoint Agent will seemingly completely ignore all Prevention or Monitoring channels.
Missing Prevention or Monitoring on an Endpoint across all channels may be a sign of a bad or missing license. To see what licenses the Endpoint is approved for, review the EDPA logs for the following:
01/10/2017 14:52:37 | 14216 | INFO | AgentServices.License | License update received: Discover: Yes, Monitor: No, Prevent: No, Agent Management: Yes
In this example, both Endpoint Monitoring and Prevent are not approved by the currently loaded licenses on Enforce. The Endpoint Agent will fail to function as expected if the adminstrator believes Monitoring and Prevent should be enabled.
This line is only ever printed in EDPA under two circumstances:
On first start of EDPA after an install.
If licenses are updated on Enforce.
To update the Endpoint Agent licenses at the Endpoint:
Add the Endpoint Prevent License to Enforce.
Restart VontuManager and VontuMonitorController services on Enforce.
Reboot the Endpoint to force the endpoint to check in to the Endpoint Server.
Subscribing will provide email updates when this Article is updated. Login is required.