Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Checking the connection between the Server and OSCE clients in OfficeScan (OSCE)

    • Updated:
    • 21 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 2003 Datacenter 64-bit
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2003 Server R2
    • Windows 2003 Standard
    • Windows 2003 Standard 64-bit
    • Windows 2008 32-Bit
    • Windows 2008 64-Bit
    • Windows 2008 Datacenter
    • Windows 2008 Datacenter 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Enterprise 64-bit
    • Windows 2008 Server Core
    • Windows 2008 Server R2 Enterprise
    • Windows 2008 Standard
    • Windows 2008 Standard 64-bit
    • Windows 2008 Web Server Edition
    • Windows 2008 Web Server Edition 64-bit
    • Windows 2012 Datacenter R2
    • Windows 2012 Enterprise
    • Windows 2012 Enterprise R2
    • Windows 2012 Server Essential R2
    • Windows 2012 Server Essentials
    • Windows 2012 Standard
    • Windows 2012 Standard R2
    • Windows 2012 Web Server Edition
    • Windows 7 32-Bit
    • Windows 7 64-Bit
    • Windows 8 32-Bit
    • Windows 8 64-Bit
    • Windows 8.1 32-Bit
    • Windows 8.1 64-Bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Home
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary

Confirm that the server and Officescan clients are able to communicate successfully. These steps are useful in:

  • Isolating pattern and scan engine update issues
  • Troubleshooting clients/agents that appear offline or disconnected, or are missing in the console
  • VPN connection check
Details
Public

To investigate communication issues between the server and the client, you need to verify their connection: 

 
  • Use the same server and client/agent for all the steps.
  • Make sure to take screenshots of all the results you get.
  • To enable the telnet command in Windows 7, follow the steps in the Microsoft article: Enabling telnet client in Windows 7.
  1. From the Security Server, ping the IP address of the client/agent that has the issue.
  2. On Client Security Agent, open the Registry Editor (regedit.exe).
     
    Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
     
    In 64 bit environments, the product is always found in the HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Note\TrendMicro\PC-cillinNTCorp\CurrentVersion hive.
  3. Go to the HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion hive and take note of the value for the registry key "LocalServerPort". This is the client/agent port. Use the decimal value.
  4. Go back to the OfficeScan server and then open a command prompt and run this command:

    telnet<space><client IP address><space><value of the client port>

  5. Open Internet Explorer then type the following in the address bar:

    http://<client's IP address>:<local server port>/?CAVIT

    Example: http://192.168.16.10:12345/?CAVIT

    If you get a result "!CRYPT!...", it means that the port is open in the client/agent and the connection from server to client/agent should work. Otherwise, there is a problem with the connection.

  6. On the OfficeScan client, open the Registry Editor (regedit.exe).
     
    Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
  7. Go to the HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion hive and take note of the values of the following registry keys:
    • "Server" - This is the OSCE server name the OSCE client/agent is reporting to
    • "ServerPort" - This is the server port number of the OfficeScan server/Security Server. Use the decimal value.
  8. If you are using OfficeScan 10.6 / 11.0 / XG, perform steps a-d. 
     
    Steps 8a-8d are only necessary for issues with the Smart Scan feature, which is only available in OfficeScan 10.6 and above.
    1. Go to the HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\iCRC\Scan Server hive.
    2. Take note of the value for the "LocalScanServerUrl" registry key. This is the server name of the client/agent.
    3. To verify if the Smart Scan server is available, open Internet Explorer, then type the following URL in the address bar:

      https://<server>:<port>/tmcss/?LCRC=08000000AC41080092000080C4F01936B21D9104

      Example:

      https://10.10.12.171:4345/tmcss/?LCRC=08000000AC41080092000080C4F01936B21D9104

      If the browser returns a File Download Security Warning pop-up window, the Scan Server is enabled and accessible:

      File Download: Security Warning
      Do you want to save this file?
      Name: tmcss
      Type: Unknown File Type, 4 bytes
      From:

      Verify Scan Server Connection Result

       
      When using this test, the "Do not save encrypted page to disk" setting must be disabled as shown below. Otherwise, the test will fail.

      TMCSS in Internet Options

      Make sure to use the port you find in your registry:

      For OfficeScan 10.x / 11.0 / XG, the port is usually 4345.
      For OfficeScan 10.x and 11.0 using Apache, the port is normally 4343.

    4. Go to Step 10.
  9. From the client/agent, ping the server name of the OfficeScan server.

    telnet<space><server name><space><value of the server port>

     
    For the server name, make sure to use the full name you find in the registry key "Server".

    To enable the telnet command in Windows 7, follow the steps in the Microsoft article: Enabling telnet client in Windows 7.

  10. Open Internet Explorer then type the following URL in the address bar:
    • For OfficeScan: "http://<server name>:<value of the server port>/officescan/cgi/cgionstart.exe"

    If the next screen shows "-2", this means the client/agent can communicate with the server. Otherwise, there is a problem with the connection.

  11. Send the screenshots of the results to Trend Micro Technical Support for further analysis.
     
    For OfficeScan 10.6 or later, also send the file you obtained in Step 8c.

    For offline clients/agents, run the following command to check if the tmlisten port is open:

    netsh firewall show state

    Example:

    firewall status

Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1037975
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.