Views:

To resolve this issue, assign an IP address on the Apex One client to use when sending data to the Apex One server and then add the "IP Template" parameter on the client with multiple NICs or on the SQL cluster that uses the 169.254 segment for cluster traffic:

  1. On the security server, go to the ..\PCCSRV folder and open the ofcscan.ini file using text editor.
  2. Under the [Global Setting] section, add the following key and assign the valid IP address for the Apex One server:

    IPTemplateDeployEnable=1
    IPTemplateDeploy=<assign_a_valid_IP_address_range_used_to_connect_to_the_officescan_server>

    For example:

    [Global Setting]
    IPTemplateDeployEnable=1
    IPTemplateDeploy0=10.200.10.x

     
    If some of your clients have 2 or more network cards, set the range to the ones you will be using to connect.
     

    IPTemplateDeploy1=10.210.x.x

     
    Same for a different range on a different client.
     

    IPTemplateDeploy2=10.211.10.X
    IPTemplateDeploy3=10.211.30.X
    IPTemplateDeploy4=172.18.x.x
    IPTemplateDeploy5=172.17.x.x
    IPTemplateDeploy6=172.16.x.x
    IPTemplateDeploy7=192.168.50.X
    IPTemplateDeploy8=192.168.30.X
    IPTemplateDeploy9=192.168.10.X

     
    Only the characters x and X can be used. The wildcard * is not supported and the maximum IP template is 10 (0-9). This will deploy the settings on the officescan.ini file to clients within the range defined by those symbols.
     
  3. Save and close the file.
  4. Log on to the Apex One server management console.
  5. Deploy Global Settings by going to Agents > Global Agent Settings and click Save to deploy the settings to the clients.

    The Apex One client program automatically installs the following registry keys:

    Key: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion
    Name: IPTemplateDeployEnable
    Type: REG_DWORD
    Data: 1

    Key: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion
    Name: IPTemplateDeploy0 to IPTemplateDeploy9
    Type: REG_SZ
    Data: the assigned IP address

You will not be able to directly edit the registry if self-protection is enabled. This setting should be deployed using the IPTemplateDeploy method from the ofcscan.ini global settings.