Machine status detect mechanism
Hi, we use Acronis 11.5 (39029) to backup Windows 7 Clients protected with Check Point Security. The Acronis rule allows both inbound and outbound TCP traffic on port 9876 with the AMS and the storage node. The firewall has stricter rules when compliance is not met (restricted mode) and it causes the machine to show offline in AMS. I can verify machine is up and running, inbound ping is allowed in restricted mode. Firewall log shows the rule is applied and traffic belonging to Acronis Backup is allowed.
Due to the Task Start Conditions settings in the Default Plan Options (Wait until conditions are met) the backup was not taking place until machine shows as online. I have now selected "Run task anyway" as a workaround.
How does AMS detect the presence of the client? Is there anything besides TCP 9876? The frustrating thing is when the client is in restricted mode I cannot telnet on 9876 despite the Allow rules defined and the firewall log showing traffic matching these rules (e.g. regular traffic from/to AMS and to storage node when the backup is scheduled).
Planing to test a machine with WireShark but any help is greatly appreciated.

- Log in to post comments
In reply to Hello Bilgin,… by truwrikodrorow…

Thanks, Ekaterina - testing now with WireShark and port 135 cripples here and there in the traffic. I will try to find how the restricted mode affect the listening ports, I believe the firewall software does something dodgy..
- Log in to post comments