All devices disconnected from server

[Gabriel Boettcher]

At once almost 170 devices on a particular virtual server lost communication with the server, I didn't do anything different, and I didn't modify any network settings. Just downloaded the new 12.8 KES package and deleted the 12.7, but as far as I know it shouldn't be a problem.

[Tahmeed702]

5 hours ago, Gabriel Boettcher said:

At once almost 170 devices on a particular virtual server lost communication with the server, I didn't do anything different, and I didn't modify any network settings. Just downloaded the new 12.8 KES package and deleted the 12.7, but as far as I know it shouldn't be a problem.

Red cross means there is connectivity problem between servers and KSC check Ping connectivity and go to the Netagent folder of any one of the workstation then send a Heartbeat to KSC 

[Demiad]

@Gabriel Boettcher hello

Please, use this article for troubleshooting https://support.kaspersky.com/12776

[Gabriel Boettcher]

8 horas atrás, Tahmeed702 disse:

Red cross means there is connectivity problem between servers and KSC check Ping connectivity and go to the Netagent folder of any one of the workstation then send a Heartbeat to KSC 

Did it. With klnagchk.exe got the following error:

[Tahmeed702]

2 minutes ago, Gabriel Boettcher said:

Did it. With klnagchk.exe got the following error:

Run Klmover script in servers 

[Gabriel Boettcher]

5 minutes ago, Tahmeed702 disse:

Run Klmover script in servers 

To change the administration server address? 

[Tahmeed702]

8 minutes ago, Gabriel Boettcher said:

To change the administration server address? 

no to reconnect servers with KSC 

run klmover -address [IP of KSC] in cmd , in the Netagent folder of disconnected servers 

[Gabriel Boettcher]

5 minutes ago, Tahmeed702 disse:

no to reconnect servers with KSC 

run klmover -address [IP of KSC] in cmd , in the Netagent folder of disconnected servers 

Ok, but it is asking to uninstall the agent, do i have to do this in every computer?

[JL - KL DACH]

Hello Gabriel,

the pure klmover command is not asking for unistalling the network agent. This command is intended to recreate certificates or move clients from one KSC Server to another. Or to reconnect an existing KSC Server. If it is asking for uninstall there seems to be a problem with the Agent installation itself.

I recommend to check that ports 14000 and 13000 are open for the Network Agent connectivity.
A red cross at the device icon in KSC means there is no network connection to the KSC at all. You have to make sure that the KSC Server can be pinged from device and vice versa

If this is possible try to create a remove uninstall task to remove the network agent from your devices. You have to add an Admin account to uninstall with rights to access Admin$

I hope I have been able to help you and remain

with Best Regards

 

[Gabriel Boettcher]

4 minutes ago, JL - KL DACH disse:

Hello Gabriel,

the pure klmover command is not asking for unistalling the network agent. This command is intended to recreate certificates or move clients from one KSC Server to another. Or to reconnect an existing KSC Server. If it is asking for uninstall there seems to be a problem with the Agent installation itself.

I recommend to check that ports 14000 and 13000 are open for the Network Agent connectivity.
A red cross at the device icon in KSC means there is no network connection to the KSC at all. You have to make sure that the KSC Server can be pinged from device and vice versa

If this is possible try to create a remove uninstall task to remove the network agent from your devices. You have to add an Admin account to uninstall with rights to access Admin$

I hope I have been able to help you and remain

with Best Regards

 

I deleted the KES 12.7 version to install the 12.8 version. Could this be causing this problem? 

[Renan Corassa]

Regarding the task for installing KES 12.8.
Did you select the option to install the Network Agent?

[Gabriel Boettcher]

1 hora atrás, Renan Corassa disse:

Regarding the task for installing KES 12.8.
Did you select the option to install the Network Agent?

No , i only installed with this 12.8 package on 2 machines. I was worried about deleting the KES 12.7

[Renan Corassa]

The topic was a bit strange.
It gave the impression that everything happened because you removed 12.7 and installed 12.8. This would happen if you had selected the network agent when installing 12.8, but it would be a momentary situation, because the agents would then reconnect.

[Gabriel Boettcher]

8 minutes ago, Renan Corassa disse:

The topic was a bit strange.
It gave the impression that everything happened because you removed 12.7 and installed 12.8. This would happen if you had selected the network agent when installing 12.8, but it would be a momentary situation, because the agents would then reconnect.

I get this error when i do the klnagchk.exe utility on a device

[Tahmeed702]

11 hours ago, Gabriel Boettcher said:

I get this error when i do the klnagchk.exe utility on a device

Please reinstall netagent , check a server is communication with KSC with port 14000 or not .

run command in powershell, Test-NetConnection [KSC-IP] -Port 443 , 

Use-case, Test-NetConnection 10.10.5.11 -Port 14000

[Renan Corassa]

Well, by default, port 14000 is disabled in the KSC Server properties and you should enable it if you believe it is necessary. Remember that it is an unencrypted port and this affects your security. The error reported can occur for a number of reasons.

Network Connectivity Problems
Blocked Ports
Network Agent Service Not Running or Corrupted Data
Certificate Problems
Version Incompatibility

[Gabriel Boettcher]

1 hora atrás, Renan Corassa disse:

Well, by default, port 14000 is disabled in the KSC Server properties and you should enable it if you believe it is necessary. Remember that it is an unencrypted port and this affects your security. The error reported can occur for a number of reasons.

Network Connectivity Problems
Blocked Ports
Network Agent Service Not Running or Corrupted Data
Certificate Problems
Version Incompatibility

Certificate Problems
Version Incompatibility

How do I verify these two possibilities?

[Renan Corassa]

1. O arquivo KLSERVER.cer está localizado na pasta C:\ProgramData\KasperskyLab\adminkit\1103. Este é o certificado gerado pelo Kaspersky Security Center (KSC) para os dispositivos, por isso mencionei que ele se refere à porta 13000 e não à 14000, que neste caso não utiliza o certificado. Neste caso, é ele que garante a segurança da troca de dados, impedindo interceptações maliciosas e garantindo que somente dispositivos autorizados possam se conectar ao servidor de administração. Portanto, caso o certificado expire ou seja removido, a comunicação entre o servidor e os dispositivos pode ser interrompida, impactando o gerenciamento centralizado da solução de segurança. Por isso, é essencial monitorar sua validade e renová-lo quando necessário.

2. Versão do KSC Network Agent com a do dispositivo, mantenha sempre a versão mais próxima da atual.

 

Edited February 14 by Renan Corassa

[Caos]

@Renan Corassa

Please remember english forum.

Regards

[Renan Corassa]

Sorry my friend.

[Tahmeed702]

On 2/15/2025 at 12:43 AM, Gabriel Boettcher said:

Certificate Problems
Version Incompatibility

How do I verify these two possibilities?

I am not getting your problem please share screenshots of the error in English