Jump to content
ewong

ESET Agent not using the right NIC

Recommended Posts

I've noticed with ESET Agent, it takes the first NIC's IP it finds without checking with the configuration.  With multi-nic systems, this is a bit of a pain since on the ESMC system list, it'd show other network IPs.

Shouldn't the Agent report to the ESMC the same IP in the network as the ESMC server?

For instance, as shown in the attached screenshot, 

The first item is the ESMC server (so in the 192.168.8.0 network), the 2nd one is my system (it's chosen the NPCAP interface), the third is another system that has two nics, and finally the last one is another system in the same 192.168.8.0 network.  

Have I screwed up the AGent deployment (via GPO) setting?

Any clarifications appreciated.

Thanks.

:ewong

Clipboard01.jpg

Edited by ewong
added "Thanks" to the end of the post.

Share this post


Link to post
Share on other sites

It depends on the OS whichever NIC it uses for communication. It's not currently possible to configure metric in any way.

Share this post


Link to post
Share on other sites

Unfortunately AGENT is currently not reporting NIC that is actually used for connection to ESMC -> it reports list of all interfaces with list of all assigned IP addresses. What you see in main client's view in console is selected IP address that is considered as the one with highest priority. In most cases it means it is IP address of NIC that has highest priority on client machine. In case of multiple IP addresses assigned to this NIC, it should be primary IP address of it.

Share this post


Link to post
Share on other sites
On 9/13/2019 at 2:50 AM, MartinK said:

Unfortunately AGENT is currently not reporting NIC that is actually used for connection to ESMC -> it reports list of all interfaces with list of all assigned IP addresses. What you see in main client's view in console is selected IP address that is considered as the one with highest priority. In most cases it means it is IP address of NIC that has highest priority on client machine. In case of multiple IP addresses assigned to this NIC, it should be primary IP address of it.

Thanks for the explanation.  Is it possible to get the agent to compare the IP of the nic with the IP of the ESMC server so that it can use the same network IP?   (Just asking..)

It's strange and a bit scary (had I not asked here) that there could be a chance that agents can scan other connected networks.

Edmund

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...