Help - Search - Members
Full Version: Administratoin Kit 8, cannot remote install onto one machine
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
AWilderbeast
Hi All,

Im getting the following error, when trying to install antivirus on on machine, i have 4 machines in this task, that all have the same components same os same everything, (vista business) its installed on on 3 of the machines, but one has fatal error

QUOTE
Unclassified error. Error information is available in event description.


QUOTE
Network Agent (8.0.2048): Remote installation failed on the computer: Fatal error during installation.


i tired looking for the installation file error report in the temp directory, wasnt there, so i registered the msi_log key and still no luck

can anyone help me out?

Thanks
Helmut
Did you try to install the agent locally from the share?
AWilderbeast
QUOTE(Helmut @ 2.11.2009 10:58) *
Did you try to install the agent locally from the share?


ive installed the network agent from the share then added it to manged computers group, then right clicked > install application > av for workstation... same error came back, even though ive installed the agent now

does the machine need a restart after installing the agent?

Thanks

EDIT: i right clicked the machine > check connection > machine was unavailable...
Helmut
You will be ask to start the service. Thats is.

Please check the connection from the client. Open a command window and run klnagchk.exe.
AWilderbeast
here is the output from that

QUOTE
Microsoft Windows [Version 6.0.6001]
Copyright © 2006 Microsoft Corporation. All rights reserved.

C:\Users\User>"C:\Program Files\Kaspersky Lab\NetworkAgent 8\klnagchk.exe"

Starting utility 'klnagchk'...
Checking command line options...OK
Initializing basic libraries...OK
Current computer is 'DOMAIN\CHDO-01'
Network Agent version is '8.0.2048'


Reading the settings...OK
Settings verification...OK
Network Agent settings:
Administration Server address: 'SERVER1'
Use SSL connection: 1
Compress traffic: 1
Numbers of the Administration Server SSL ports: '13000'
Numbers of the Administration Server ports: '14000'
Use proxy server: 1
Address: '192.168.170.2:8080'
User name: 'Administrator'
Password: '*'
Administration Server certificate: missing
Open UDP port: 1
Numbers of UDP ports: '15000'

Synchronization interval (min): 15
Connection timeout (sec): 30
Send/receive timeout (sec): 180
Host ID:


Attempt to connect to the Administration Server...Error - Transport level error
while connecting to http://SERVER1:13000: general error 0x4F9.
Full error information:
#1273 (0) Transport level error while connecting to http://SERVER1:13000: gener
al error 0x4F9.

An attempt to send ICMP packet to the proxy server
Sending ICMP packet 192.168.170.2 [192.168.170.2]...OK
Sent = 1, Received = 1


Attempt to connect to the Network Agent...OK
Network Agent is running
Receiving the Network Agent's statistical data...OK
Network Agent's statistical data:
Total number of synchronization requests: 0
The number of successful synchronization requests: 0
Total number of synchronizations: 0
The number of successful synchronizations: 0
Date/time of the last request for synchronization:


Deinitializing basic libraries...OK


do i need to open ports 13000 and 14000 on isa?
i didnt have to do that on any of the other machines though :S

Thanks
behemoth
Hello,
it seems that your proxy 192.168.170.2 blocks connection to server. Check its log and open the ports 13000 and 14000 if you need to.
Helmut
How to configure ISA Server to allow interaction of Administration Agent and Server.
AWilderbeast
hi, ive added the rules to isa see below




i still got the error and i run klnagchk.exe again and got the same error messages

i did monitored the ip address of the client in isa to see what was coming and going whilst the task ran, the only thing that came up where mail requests

any ideas?

THanks
Helmut
The best solution is when you use the IP from your adminserver instead of the name.

Please change this settings in the properties of the installation package of the agent.

On the client you can use "klmover -address xxx.xxx.xxx.xxx"

AWilderbeast
i did as you said below, that right?

QUOTE
C:\Users\em>"C:\Program Files\Kaspersky Lab\NetworkAgent 8\klmover.exe" -address 192.168.170.2
Starting utility 'klmover'...
Checking command line options...OK
Initializing basic libraries...OK
Stopping service 'KLNagent'...OK
Settings verification...OK
Reading the settings...OK
Preparing settings...OK
Writing settings...OK
Starting service 'KLNagent'...OK


Operation completed successfully.


still didnt work though
but now i am getting something back from ISA monitoring that address

do you know whats happening from the below?


QUOTE
Failed Connection Attempt SERVER1 03/11/2009 10:41:34
Log type: Web Proxy (Forward)
Status: 12204 The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests.
Rule:
Source: ( 192.168.170.13:0)
Destination: (mail.mydomain.org 192.168.170.2:13000)
Request: 192.168.170.2:13000
Filter information: Req ID: 1ac23906; Req ID: 1ac23906
Protocol: SSL-tunnel
User: anonymous
Additional information


thanks for your help
Helmut
Please configure SSL port 13000 on your ISA-Server.
AWilderbeast
QUOTE(Helmut @ 3.11.2009 10:57) *
Please configure SSL port 13000 on your ISA-Server.


forgive my lack of knowledge but can you tell me how to do so?

thankyou
AWilderbeast
anyone help me out?
AWilderbeast
manged to do it and its now installed smile.gif
Rob_R
QUOTE(AWilderbeast @ 4.11.2009 09:30) *
manged to do it and its now installed smile.gif


I'd be curious as to why this client wants to go through your proxy server where it seems your other clients did not, is this client not set to bypass proxy for local addresses? Your internal clients shouldn't be going through the proxy for any internal connections.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.