Before you go through the trouble of uninstalling/reinstalling, make sure you are launching the agent manager by right clicking and ‘Run as Administrator.’ If you aren’t doing this then UAC may very well be blocking your access to client.keys and the conf file. The Windows Firewall does indeed come enabled by default, but that isn’t the issue here (it also doesn’t block any outbound connections by default, unless domain policy is at play).
From: ossec-list@googlegroups.com [mailto:ossec-list@googlegroups.com] On Behalf Of theresa mic-snare Sent: Wednesday, September 23, 2015 12:38 PM To: ossec-list <ossec-list@googlegroups.com> Subject: Re: [ossec-list] OSSEC Windows Client registration failed Thanks guys, I will try that. I currently don't have any access to the workstation (I'm at home) but I will give it a shot. Is the windows firewall by default enabled? Sorry, I don't have any windows know-how....I'm only ever using *NIX based systems... what strikes me though....to me it seems like a *permission* problem (see screenshots --> unable to set permissions on auth key files) rather than a firewall that's dropping the connection?! I will uninstall and reinstall with the administrator user (although I thought I had used it....but obviously not) Am Mittwoch, 23. September 2015 19:59:09 UTC+2 schrieb jose: Please review your firewall, usually windows block the traffic And try to restart the service manually as well Rewards Enviado desde mi iPhone El 23 sept 2015, a las 18:53, theresa mic-snare <rockpr...@gmail.com <javascript:> > escribió: Hi guys, yesterday I wanted to install the windows client on a Win7 workstation. The installation went fine, however the registration with the OSSEC master failed. Error that I got was: Which permissions does the config need on windows? <https://lh3.googleusercontent.com/-m5eABLuBbSU/VgLY3r86rSI/AAAAAAAACwo/Y5YGnACwi9w/s1600/ossec_windows2.png> <https://lh3.googleusercontent.com/-m5eABLuBbSU/VgLY3r86rSI/AAAAAAAACwo/Y5YGnACwi9w/s1600/ossec_windows2.png> <https://lh3.googleusercontent.com/-m5eABLuBbSU/VgLY3r86rSI/AAAAAAAACwo/Y5YGnACwi9w/s1600/ossec_windows2.png> <https://lh3.googleusercontent.com/-m5eABLuBbSU/VgLY3r86rSI/AAAAAAAACwo/Y5YGnACwi9w/s1600/ossec_windows2.png> -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. <https://lh3.googleusercontent.com/-m5eABLuBbSU/VgLY3r86rSI/AAAAAAAACwo/Y5YGnACwi9w/s1600/ossec_windows2.png> -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
