transport level error has occurred while connecting to http://XXXX:13000

[Reyou]

Hello some of my clients(Agent 14.2 and Endpoint 12.6 ) suddenly disconnect from KSC(14.2).

when I try to correct the connection an error appears 

"administration server certificate: not installed,"

"Transport level error while connecting to http://XXXX:13000" .

port 13000 is open (I can see KSC by telnet command from client).

screenshot attacked

Edited November 6 by Reyou

[KarDip]

Hello @Reyou

It sounds like you're experiencing issues with the connection between your clients and the Kaspersky Security Center (KSC). Here are some steps you can take to troubleshoot the problem:

1. Check Certificate Installation:

   • Ensure that the administration server certificate is properly installed on the clients. You can do this by navigating to the KSC settings and exporting the certificate, then importing it on the clients.

2. Verify Network Configuration:

   • Since you mentioned that port 13000 is open, double-check any firewall settings on both the KSC server and the clients to ensure that traffic is allowed on this port.

3. Update Client Software:

   • Make sure that both the KSC and the client software are up to date. Sometimes, compatibility issues arise from version mismatches.

4. Review KSC Logs:

   • Check the logs on the KSC for any additional errors or warnings that might give you more context about the disconnections.

5. Restart Services:

   • Restart the KSC service on the server and the Kaspersky services on the affected clients. This can sometimes resolve transient connection issues.

6. Test Connectivity:

   • Use tools like ping and tracert to ensure that there are no network issues between the clients and the KSC.

7. Reconfigure Client Settings:

   • If the issue persists, consider reconfiguring the client settings to point to the KSC again.

If you still encounter problems after trying these steps, providing more detailed logs or specific error messages could help in diagnosing the issue further.

Here’s a step-by-step guide to help you address the issues with your Kaspersky Security Center (KSC) and the clients:

1. Check Certificate Installation

On KSC:

1. Open Kaspersky Security Center.
2. Go to Administration Server > Properties.
3. Navigate to the Certificates section.
4. Export the administration server certificate.

On Client:

1. Copy the exported certificate to the client machine.
2. Open the Kaspersky Security Center client interface.
3. Go to Settings > Administration > Manage Certificates.
4. Import the administration server certificate.

2. Verify Network Configuration

Firewall Settings:

1. On the KSC server, go to your firewall settings (Windows Firewall or any other).
2. Ensure that inbound and outbound rules allow traffic on port 13000.
3. Repeat this on the client machine.

Telnet Test:

1. Open Command Prompt on the client machine.
2. Type telnet <KSC_IP_Address> 13000 and press Enter.
3. If it connects, the port is open; if not, check firewall settings.

3. Update Client Software

1. Open Kaspersky Security Center.
2. Go to Managed Devices and find the affected clients.
3. Right-click on each client and select Update to ensure they are running the latest version.

4. Review KSC Logs

1. In KSC, go to Logs.
2. Look for any entries related to the disconnected clients.
3. Note any error messages or warnings that could provide more context.

5. Restart Services

On KSC:

1. Open the services management console (Run services.msc).
2. Find Kaspersky Security Center Administration Server and restart it.

On Client:

1. Open the services management console (Run services.msc).
2. Find Kaspersky Security Center Client and restart it.

6. Test Connectivity

1. Open Command Prompt on the client machine.
2. Use ping <KSC_IP_Address> to check if the KSC server is reachable.
3. Use tracert <KSC_IP_Address> to see the route taken to reach the KSC.

7. Reconfigure Client Settings

1. Open the Kaspersky Security Center client interface on the affected machine.
2. Go to Settings > Administration.
3. Re-enter the KSC server address and port (13000).
4. Save the settings and restart the client.

Additional Help

If you continue to experience issues, consider reaching out to Kaspersky support for assistance, providing them with detailed logs and error messages.

Thank you

Edited November 7 by KarDip
elements console error