Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

[IAG] After configuring the traffic behavior inspection rules, EDR will still redirect to the download interface after installation

Posted
Updated
Byadmin
Views3

Problem Description

After configuring the traffic behavior inspection rules, EDR will still redirect to the download interface after installation

Effective troubleshooting steps

  1. Check the basic configuration on the IAG and confirm that the judgment rule is that no timeout is detected in 1 minute.
  2. After changing the timeout to 30 minutes, EDR will still redirect to the download page
  3. Finally, the packet capture analysis confirms that the data from the PC to the EDR server does not pass through the IAG, so it will be redirected to the EDR installation interface continuously.

Root cause

Data from the PC to the EDR server does not pass through the IAG, so it will be redirected to the EDR installation interface continuously.

solution

  1. Enable terminal plug-in check rules
  2. Adjust the EDR server position to the WAN port direction of the IAG device

Operation Impact Scope

To enable the terminal plug-in inspection rule, you need to add terminal security inspection authorization

Original Link

https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=25758&isOpen=true