topic Re: Active Directory scanner settings in Endpoint

Active Directory scanner settings

Sanja_Rakic — Thu, 04 Jul 2019 13:33:36 GMT

Hi,

I see that I can't change scan interval in active directory scanner configuration using Check Point Smart Endpoint console. Is there some other way to change this setting?

Re: Active Directory scanner settings

PhoneBoy — Sat, 06 Jul 2019 02:39:55 GMT

Not sure but it might be worth looking at the file referenced in this SK to see if you see anything obvious: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101074

Re: Active Directory scanner settings

Nick_Doropoulos — Sun, 07 Jul 2019 10:22:40 GMT

Hi Sanja,

May I ask what the version of your Endpoint Security Manager is please?

Thanks.

Re: Active Directory scanner settings

Sanja_Rakic — Mon, 08 Jul 2019 07:22:53 GMT

Hi Nick,

My Endpoint Management server is running R80.20 and htofix Take 80 is installed.

Thanks for your reply!

Re: Active Directory scanner settings

Eyal_Magidish — Mon, 08 Jul 2019 10:18:34 GMT

Hi,

The following SK isn't relevant, it is related to a known limitation of no more than 32 Directory Scanner.

You can change the scan interval in Directory Scanner settings, under "Advanced".

Regards,

Eyal

Re: Active Directory scanner settings

Sanja_Rakic — Mon, 08 Jul 2019 10:25:11 GMT

Hi, thanks for your reply. I know that there is an option under advanced, but the issue is that when I try to change 5 minute default setting on an active organizational scanner, it doesn't work, I cannot press ok and save the change.

I have tried it on multiple Endpoint Management servers and the situation is the same.

Re: Active Directory scanner settings

Chris_Horridge — Mon, 08 Jul 2019 19:28:37 GMT

Are you trying to lower the time or up the time?

Re: Active Directory scanner settings

Sanja_Rakic — Mon, 08 Jul 2019 19:34:08 GMT

Hi,

I am trying to lower the time, my customer thinks that 5 minutes interval is too often. I would like to make this interval bigger, maybe an hour or so,

Re: Active Directory scanner settings

PhoneBoy — Mon, 08 Jul 2019 20:31:08 GMT

Might be worth a TAC case so we can investigate this.

Re: Active Directory scanner settings

Chris_Horridge — Mon, 08 Jul 2019 20:36:16 GMT

Sanja,

Are you logging in with an account that was created for you or are you logging in with the default admin account through SmartEndpoint?

Thanks!

Christopher Horridge

Re: Active Directory scanner settings

Sanja_Rakic — Tue, 09 Jul 2019 08:13:53 GMT

I am logging with admin account.

Re: Active Directory scanner settings

Kiril_Kaper — Wed, 10 Jul 2019 13:58:03 GMT

Check sk131452, if it will not help - open a ticket to TAC.

When executing the procedure from the SK, please cpstop the server, execute the procedure and cpstart the server.

Re-login to SmartEndpoint after the procedure execution and server full start and check if you can change the interval.