Problems connecting to security Center from outside the office.

[JorgeCRC]

We have an active directory in our office and all clients connect correctly.

however I'm unable to establish a connection of a client "outside of the office"

The "klnagchk" utility returns an general error 0x502

 

I'm complitly lost, any help will be appreciated.

[ElvinE5]

Good day

Please tell me how you plan to connect devices outside the office, and what you have done for this.

 

typically, a connection gateway is used to solve such problems.

https://support.kaspersky.com/KSC/14/en-US/204420.htm

[JorgeCRC]

Yes, we have dedicated computer to function as a external gateway.

KSC 14 is un a dedicated PC, Private IP: 172.17.175.67

The Gateway is on another PC, Private IP 172.17.175.66

We have an internal a-record to resolve kaspersky.cultura.gob.mx to 172.17.175.67

We also have en external record to resolve kaspersky.cultura.gob.mx to 189.206.56.125 (Public IP)

And our NAT to connect 189.206.56.125 to 172.17.175.66

 

The gateway is configured in KSC and the gateway connects with KSC

But an external PC can't connect to KSC eider by kaspersky.cultura.gob.mx or 189.206.56.125

 

Any help will be appreciated.

 

[ElvinE5]

I tried to check the availability of a connection to your public IP on port 13000, which is necessary for the agent and should be forwarded to the gateway 172.17.175.66 however, I didn't succeed ...

Спойлер

maybe it's some kind of limitation in my network ... so the first thing is to check that your clients can connect to the KSC through NAT

connections must be allowed to the connection gateway from the KSC side, and from the external network through the NAT

Спойлер

second

check if the agent's connection settings via connection gateways are correct before installing this package on a device located outside the office network.

you should have something like that.

Спойлер

and setting that the client will connect to the KSC through the gateway.

Спойлер

 

there is a good video on how to set up such gateways, although it is only in Russian, but you can turn on subtitles and translation.

Part 1

Спойлер

 

Part 2

Спойлер

 

 

Edited December 23, 2022 by ElvinE5