Dr.Web Server Detection Service

In this connection scheme, client does not know the Server address preliminary. Before establishing each connection, the Server will be searched in the network. To do this, the client sends the broadcast query and waits for the respond, that includes Server address. After the client gets respond, it will establish a connection with the Server.

To realize this scheme, the Server must "listen" the network for such queries.

Several variants of realization of this scheme is available. Most important is that the Server search method at the clients side must be matched with the Server respond part.

The Multicast over UDP mode is used by default in Dr.Web Enterprise Security Suite:

1.Server gets registered in the multicast group with an address specified in the Server settings.

2.Agents during Server search, send multicast requests to the group address specified at the step 1.

Server listens by default (similarly to direct connections): udp/231.0.0.1:2193

Please note: in Servers of version 4, the 2371 port was used. In the 10 version, this port is no longer supported.

This parameter is set at the Servers settings: Administration → Dr.Web Server configuration → the Network tab → the Transport tab → the Multicast group field.