When you use the Web UI to enable provisioning on your DMZ server, your Endpoint Security (HX) agents receive the new configuration setting but the provisioning server does not start on your DMZ server. To start the provisioning server on your DMZ server, you must also enable provisioning on your DMZ server through the CLI or provisioning will fail.
To designate a DMZ server as a provisioning server using the Web UI:
Note
After you use the Web UI to designate the DMZ server as a provisioning server, you must also enable provisioning for the DMZ server in the CLI.
Log in to the Web UI for your DMZ server.
From the Admin menu, select Agent Versions.
In the upper right corner of the page, select Assign Server Addresses to go to the Policies page.
From the Policies table, click the Agent Default policy link.
Select the Server Addresses tab.
From the Enable Provisioning section, locate the DMZ server that you want to use for provisioning.
If the endpoints in your environment have agent software versions earlier than version 20 installed, select Set as Primary to designate the DMZ server as the provisioning server. This will deselect any other server on the Server Addresses tab as the primary server.
If the endpoints in your environment have agent software version 20 or later installed, select Enable Provisioning to designate the DMZ server as a provisioning server.
Click Save.
To use the Endpoint Security (HX) server CLI to enable provisioning for a DMZ server:
On your Endpoint Security (HX) appliance, enable CLI configuration mode.
hostname > enablehostname # configure terminal
Enable provisioning on your DMZ server:
hostname (config) # hx ecosystem dmz <dmz-ip> provisioning-enabled
where
<dmz-ip>is the IP address of the DMZ server for which you are enabling provisioning.Save your changes.
hostname (config) # write memory
Verify that the DMZ server is a provisioning appliance.
hostname (config) # show hx ecosystem
The server configuration should show an attached DMZ server with provisioning enabled:
Appliance Role: master DMZ Appliance: {<IP address> or <domain name of DMZ appliance>} Provisioning: enabled