Problem Agent Windows

365 views
Skip to first unread message

Virgus

unread,
Sep 25, 2023, 7:49:43 AM9/25/23
to Wazuh | Mailing List
Good morning,

I would have a problem.
I would like to install Wazuh Windows Agents on the network. But these are private IPs (10.10.11.* etc)
I cannot ping the various computers to each other even if they are all in the same room and all connected to the network.

How can I solve the problem?
Can I install agents via domain and not via IP?

toddehb

unread,
Sep 25, 2023, 7:59:54 AM9/25/23
to Wazuh | Mailing List
Are all clients and Wazuh-Manager on the same Subnet eg. 10.10.11.0/24?

Virgus

unread,
Sep 25, 2023, 8:11:58 AM9/25/23
to Wazuh | Mailing List
Wazuh is located on an Ubuntu Virtual Machine.

Virtual Machine: 10.0.2.15

Computer where the virtual machine is: 10.10.11.96

Maybe the solution is to put VirtualBox using the computer's IP?
I don't know how to do it.

toddehb

unread,
Sep 25, 2023, 8:35:02 AM9/25/23
to Wazuh | Mailing List
What type of OS is on 10.1.0.11.96? Can you change virtual switch settings to bridged mode on the vm host?

Virgus

unread,
Sep 25, 2023, 8:43:52 AM9/25/23
to Wazuh | Mailing List
10.10.11.96  - All Computer have Windows 10 

Yes, I tried to set up VirtualBox in Bridge but the connection doesn't work.

"Connection failed" and there are three dots on the connection symbol.

Javier Medeot

unread,
Sep 25, 2023, 2:54:07 PM9/25/23
to Wazuh | Mailing List
Hello, Virgus.

To your question about installing agents without providing an IP address, the answer is yes, you can provide the FQDN instead of the IP address of the Wazuh server, for example wazuh-agent-4.5.2-1.msi WAZUH_MANAGER="hostname.domain.local".

About the mention of not being able to "ping the various computers to each other", it seems you have a connectivity issue that is unrelated to your Wazuh VM configuration. You could check your firewall settings and also look for network configuration issues. You can test connectivity using tools like ping and tracert and share here the results.

In addition, let me share the links for some of our Installation alternatives and installation guides:
Thank you.

Virgus

unread,
Sep 26, 2023, 5:13:18 AM9/26/23
to Wazuh | Mailing List
I solved it regarding the IP.

On all machines I can access Wazuh (via IP) only that when I install the Agent "Nerver onnect agents" appears

How can I solve it?

Javier Medeot

unread,
Sep 26, 2023, 7:55:50 AM9/26/23
to Wazuh | Mailing List
Good. Now, please take a look at this guide.
Also look for errors in the ossec.log file. This is very important to check because you can find here the specific cause of the problem.

Have you followed the Installing Wazuh agents on Windows endpoints guide to install the agents? What Wazuh version have you deployed for the central components and for the agents?

Share the results so we can check the details and see what could be going on.

Thank you.
Reply all
Reply to author
Forward
0 new messages